Token Based Authentication

1. User Requests Access with Username / Password
2. Application validates credentials
3. Application provides a signed token to the client
4. Client stores that token and sends it along with every request
5. Server verifies token and responds with data

Lý thuyết

https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication

Thực hành

https://code.msdn.microsoft.com/Token-Based-Authentication-6db2acc9