Secure Web api second part.

Question

How to secure webapi with ajax request .With demo

Jaimin Shethiya · Answer

Hello Sourabh, can you please check with below code Basic authentication example var username = "user"; var password = "pwd"; var url = 'mysite.com'; $.ajax({ url: url, success: function(json) { alert("Success", json); }, error: function(XMLHttpRequest, textStatus, errorThrown) { alert(textStatus, errorThrown); }, //headers: {'Authorization': 'Basic bWFkaHNvbWUxMjM='}, beforeSend: function (xhr) { xhr.setRequestHeader ("Authorization", "Basic " + btoa(username + ":" + password)); }, type: 'GET', contentType: 'json', }); Bearer Authentication var username = "user"; var password = "pwd"; var tokenValue = 'some value for authenticate your web api' var url = 'mysite.com'; $.ajax({ url: url, success: function(json) { alert("Success", json); }, error: function(XMLHttpRequest, textStatus, errorThrown) { alert(textStatus, errorThrown); }, //headers: {'Authorization': ' Bearer ' + tokenValue}, beforeSend: function (xhr) { xhr.setRequestHeader ("Authorization", " Bearer " + tokenValue)); }, type: 'GET', contentType: 'json', }); Let me know if you have needed any other help Thanks

Jaimin Shethiya · Answer

Hi, first you have to generate the JWT token for below code and after you have to used that JWT token in Bearer authentication for every api calling using ajax. var login = { Username: "user", Password: "pwd" }; $.ajax({ url: '/api/token', data: login, //data: JSON.stringify(login), success: function(json) { alert("Success", json); }, error: function(XMLHttpRequest, textStatus, errorThrown) { alert(textStatus, errorThrown); }, type: 'POST', contentType: 'json', });

Sourabh Dhiman · Answer

public IActionResult CreateToken ( [ FromBody ] LoginModel login ) { Maybe not a api call . Please you provide me full solution.

Sourabh Dhiman · Answer

Ok I will try this.

Jaimin Shethiya · Answer

can you please try this code for var login = { Username: "user", Password: "pwd" }; $.ajax({ url: '/api/token', data: login, success: function(json) { alert("Success", json); }, error: function(XMLHttpRequest, textStatus, errorThrown) { alert(textStatus, errorThrown); }, type: 'POST', contentType: 'json', });

Jaimin Shethiya · Answer

In this what you want to call? public IActionResult CreateToken ( [ FromBody ] LoginModel login ) { this api call or another

Sourabh Dhiman · Answer

https://yogeshdotnet.com/jwtjson-web-token-authentication-and-authorization-in-asp-net-core-2-1-with-example/ Please check this.

Jaimin Shethiya · Answer

Hello, can you please refer this example for JWT token "Bearer Authentication" And url replace the your api endpoint.

Sourabh Dhiman · Answer

It's very usefull example but i want with API controller . And How to get JWT token.

Secure Web api second part.

Answers (9)