How authorize a web API using a cookie based authentication

Question

I had a MCV core app that uses cookie based authentication (stores user credentials in DB). Later I introduced a web api as the backend of this MVC application. Now both are hosted together as a Azure web app. For now my cookie authentication logic is still in the MVC application. So what is the simplest approach for me to secure the web api.

no just uses legacy approach. Store username and password in DB. — Chamodh, May 20 '21 at 06:59
What do you mean by `both are hosted in Azure as a single web` ? Same app service plan ? — Thomas, May 20 '21 at 07:07
yes in same resource plan but what I meant was both apps are running as a single web app. Frontend and backend hosted together in the same app. — Chamodh, May 20 '21 at 07:13

score 1 · Answer 1 · answered Jun 11 '21 at 18:52

1

I simply used the Authorize attribute in my API controllers and that resolved the issue.

answered Jun 11 '21 at 18:52

Chamodh

61
1
3
11

How authorize a web API using a cookie based authentication

1 Answers1