I have a Web API application and I've understood OAuth would be the standard security model for APIs where an Authentication Server would become responsible to generate Authorization Tokens so that the user can send to our server and consume the services.

I'm very new to this but I understand the roles involved:

  • Resource Owner
  • Client
  • Resource Server
  • Authorization Server

But what is OAuth exactly in practice, not in theory? Is it a .NET library? Is it a service provided by a separate Company? Is it something I can configure on my local development machine and see how it works?

How to get started with OAuth to secure a Web API application?

c# security oauth asp.net-web-api
Edit
Report