public class ValuesController : ApiController { public IEnumerable<string> Get() { return new string[] { "value1", "value2" }; } // GET api/values/5 public string Get(int id) { return "value"; } // POST api/values public void Post([FromBody]string value) { } // PUT api/values/5 public void Put(int id, [FromBody]string value) { } // DELETE api/values/5 public void Delete(int id) { } }

I have a simple api controller that I showed above. But everyone will be able to register (for example, do not poke) " https://www.example.com/api/values/delete/3 " - and delete the item from Aidi 3. How to make a closed apish so that everyone cannot use it , and only me for my other programs?

  • Add authentication and authorization. - tym32167
  • as? is there a link? - Rostik Boretsky
  • CustomAuthorizeAttribute + config.Filters.Add (new CustomAuthorizeAttribute ()); - kimaman2
  • There are many different ways to implement authorization / authentication. It all depends on the requirements. Not a bad start to learn here asp.net/web-api/overview/security - tym32167

0