Authentication

One of our primary concerns will be security and integrity of data and/or requests, so we will be establishing a special API authorization that will be used to perform an identity challenge along with domain to verify that the Internal Api are who they say they are.

Basic authentication is a simple authentication scheme built into the HTTP protocol. If a request requires authentication, the server returns 401 (Unauthorized). The response includes a WWW-Authenticate header, indicating the server supports Basic authentication.

WebAPI is a trending technology. As we are exposing our WebAPI to the outside world, we should maintain security in WebAPI. It means a valid user can only access WebAPI, or else it will throw an unauthorization error.