Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

1
  • 1
    Just a remark here, when you post to /token the response contains an access_token usable as a bearer authentication on Web API calls, but it also returns a set-cookie header which automatically saves a cookie locally when called from $.ajax, and this cookie will authorize MVC calls. So 1 login action is enough for both controllers (mvc and webapi), I save the access_token in localStorage for web api calls, personally; Commented Oct 25, 2014 at 4:24