The ASP.NET Web API is a framework that lets you build sophisticated cross-platform HTTP services using a simple unified toolset. ASP.NET Web API applications can be consumed by the widest possible range of devices from tablets and smartphones to desktops. If a device operates over HTTP then the Web API can interface with it. Built on top of ASP.NET MVC it automatically seperates out and handles service-layer agreements allowing you to focus on the form and function of your code without needing to worry about low-level interoperability concerns. So long as your code is correctly crafted Web API will do the rest. Practical ASP.NET Web API provides you with a hands-on and code-focused demonstration of the Web API in action. From the very beginning, you'll be writing working code in order to see best practices and concepts in action. As the book progresses, the concepts and code will become more sophisticated. Beginning with an overview of the web service model in general and Web API in particular, you'll progress quickly to a detailed exploration of the request binding and response formatting that lie at the heart of Web API.You'll investigate various scenarios and see how they can be manipulated to achieve the results you need. Later in the book more sophisticated themes will be introduced that will set your applications apart from the crowd. You'll learn how you can validate the request messages on arrival, how you can create loosely coupled controllers, extend the pipeline processing to comparmentalize your code for security and unit testing before being put onto a live hosting server. What you'll learn * What ASP.NET Web API is and how it can be used effectively * Ways to optimize your code for readability and performance * How to add Web API to both new and existing code solutions * What controller dependencies are and why they matter * How to maintain robust security across your projects * Reliable best-practices for using Web API in a professional context Who this book is for The book is ideal for any .NET developer who wants to learn how the ASP.NET Web API framework works in a realistic setting. A good working knowledge of C# and the .NET framework and a familiarity with Visual Studio are the only pre-requisites to benefit from this book

ASP.NET Web API is a key part of ASP.NET MVC 4 and the platform of choice for building RESTful services that can be accessed by a wide range of devices. Everything from JavaScript libraries to RIA plugins, RFID readers to smart phones can consume your services using platform-agnostic HTTP With such wide accessibility, securingyour code effectively needs to be a top priority. You will quickly find that the WCF security protocols you're familiar with from .NET (WS-* and similar)are less suitable than they once were in this new environment; proving themselves cumbersome and limited in terms of the standards they can work with. What you'll learn . . . . . . . . Two-factor authentication using Google Authenticator . OWASP Top Ten risks for 2013 Who this book is for No prior experience of .NET-security is needed to read this book. All security related concepts will be introduced from first-principles and developed to the point where you can use them confidently in a professional environment. A goodworking knowledge and experience of C# and the .NET framework are the onlypre-requisites to benefit from this book. Table of Contents Welcome to ASP.NET Web API Building RESTful Services Extensibility Points HTTP Anatomy and Security Identity Management Encryption and Signing Custom STS through WIF Knowledge Factors Ownership Factors Web Tokens OAuth 2.0 Using Live Connect API OAuth 2.0 From the Ground Up OAuth 2.0 Using DotNetOpenAuth Two-Factor Authentication Security Vulnerabilities Appendix: ASP.NET Web API Security Distilled