I have an existing Web API 2 service and need to modify one of the methods to take a custom object as another parameter, currently the method has one parameter which is a simple string coming from the URL.  After adding the custom object as a parameter I am now getting a 415 unsupported media type error when calling the service from a .NET windows app.  Interestingly, I can successfully call this method using javascript and the jquery ajax method.

The Web API 2 service method looks like this:

    &lt;HttpPost&gt;
    &lt;HttpGet&gt;
    &lt;Route(&quot;{view}&quot;)&gt;
    Public Function GetResultsWithView(view As String, pPaging As Paging) As HttpResponseMessage
       Dim resp As New HttpResponseMessage
       Dim lstrFetchXml As String = String.Empty
       Dim lstrResults As String = String.Empty
    
       Try
          &#39;... do some work here to generate xml string for the response
          &#39;// write xml results to response
          resp.Content = New StringContent(lstrResults)
          resp.Content.Headers.ContentType.MediaType = &quot;text/xml&quot;
          resp.Headers.Add(&quot;Status-Message&quot;, &quot;Query executed successfully&quot;)
          resp.StatusCode = HttpStatusCode.OK
       Catch ex As Exception
          resp.StatusCode = HttpStatusCode.InternalServerError
          resp.Headers.Add(&quot;Status-Message&quot;, String.Format(&quot;Error while retrieving results from view {0}: {1}&quot;, view, ex.Message))
       End Try
       Return resp
    End Function

The method allows both `POST` and `GET` because the `Paging` object is optional.  If I call this method with a `GET` request it works.

And the simple .NET client code calling the service looks like this:

    Dim uri As String = BASE_URI + &quot;fetch/someview&quot;
    Dim resp As HttpWebResponse
    Dim sr As StreamReader
    Dim lstrResponse As String
    Dim reqStream As Stream
    Dim bytData As Byte()
    Dim req As HttpWebRequest = WebRequest.Create(uri)
    Dim lstrPagingJSON As String
    Dim lPaging As New Paging
    Try
       lPaging.Page = 1
       lPaging.Count = 100
       lPaging.PagingCookie = &quot;&quot;
       req.Method = &quot;POST&quot;
       lstrPagingJSON = JsonSerializer(Of Paging)(lPaging)
       bytData = Encoding.UTF8.GetBytes(lstrPagingJSON)
       req.ContentLength = bytData.Length
       reqStream = req.GetRequestStream()
       reqStream.Write(bytData, 0, bytData.Length)
       reqStream.Close()
       req.ContentType = &quot;application/json&quot;
    
       resp = req.GetResponse()
    
       sr = New StreamReader(resp.GetResponseStream, Encoding.UTF8)
       lstrResponse = sr.ReadToEnd
       &#39;// do something with the response here
    Catch exweb As WebException
       txtOutput.AppendText(&quot;Error during request: &quot; + exweb.Message)
    Catch ex As Exception
       txtOutput.AppendText(String.Format(&quot;General error during request to {0}: {1}&quot;, uri, ex.Message))
    End Try

The .NET client is running on the 4.5 framework and the service is on 4.5.2 framework.  The error is thrown at the `resp = req.GetResponse()` line. Some things I tried already:

 - on the client, set the `req.Accept` value to &quot;application/xml&quot; or
   &quot;text/xml&quot;
 - in the service method, removed the line
   `resp.Content.Headers.ContentType.MediaType = &quot;text/xml&quot;
 - replace the XML response content with some static JSON, tried to rule out any problems with sending in JSON on the request and getting XML back on the response

So far I keep getting the same 415 error response no matter what I try.

I mentioned this works when called from javascript, here&#39;s my ajax call that is working:

    $.ajax({
       headers: {},
       url: &quot;api/fetch/someview&quot;,
       type: &quot;POST&quot;,
       data: &quot;{Count:100,Page:1,PagingCookie:\&quot;\&quot;}&quot;,
       contentType: &quot;application/json; charset=utf-8&quot;,
       dataType: &quot;xml&quot;,
       success: function (data) {
          alert(&quot;call succeeded&quot;);
       },
       failure: function (response) {
          alert(&quot;call failed&quot;);
       }
    });

On the service side, there is nothing fancy going on with the route config or anything else, it&#39;s pretty much all out-of-the-box Web API 2.  I know the routing is working, calls are being correctly routed to the method, they&#39;re not going somewhere else unexpectedly, so what am I missing in the .NET client?  Any help is much appreciated!

**--- UPDATE ---**&lt;br/&gt;
I tried to create a completely new Web API service to rule out any possible issues with the existing service, I created a controller with a single method that takes a custom object as the parameter.  I then tried calling that from the .NET client and got the same error.  I also tried using WebClient instead of HttpWebRequest, but still get the same error. This is also something that previously worked for me with Web API (prior to Web API 2).

**--- UPDATE ---**&lt;br/&gt;
I also tried creating a new web app using Web API 1, when I call that with a POST my complex object parameter is now coming in null.  I have another web service running Web API 1 and verified that I can still call that successfully with complex objects.  Whatever my problem is, it appears to be something with the JSON passing between the client and server.  I have checked the JSON I&#39;m sending it and its valid, the object definition is also an exact match between the client and server so the JSON should be able to be parsed by the server.

HTTP 415 unsupported media type error when calling Web API 2 endpoint

I am using latest `web api`.

I do annotate *some* controllers with 3 different filter attributes.

    1 [Authorize]
    2 [RessourceOwnerAttribute derived from AuthorizationFilterAttribute]
    3 [InvalidModelStateAttribute derived from ActionFilterAttribute]

I can not be sure that the filters run in the order they are declared from top to down.

How do I define the order of execution in `web api 2.1` ?

https://aspnetwebstack.codeplex.com/workitem/1065#

http://aspnet.uservoice.com/forums/147201-asp-net-web-api/suggestions/3346720-execution-order-of-mvc4-webapi-action-filters

Do I still have to fix that for myself ??

Order of execution with multiple filters in web api

Can some please help me to know how to pass multiple objects from a C# console app to Web API controller as shown below?

    using (var httpClient = new System.Net.Http.HttpClient())
    {
        httpClient.BaseAddress = new Uri(ConfigurationManager.AppSettings[&quot;Url&quot;]);
        httpClient.DefaultRequestHeaders.Accept.Clear();
        httpClient.DefaultRequestHeaders.Accept.Add(new MediaTypeWithQualityHeaderValue(&quot;application/json&quot;));   

        var response = httpClient.PutAsync(&quot;api/process/StartProcessiong&quot;, objectA, objectB);
    }

My Web API method is like this:

    public void StartProcessiong([FromBody]Content content, [FromBody]Config config)
    {
    
    }


Pass multiple complex objects to a post/put Web API method

In our `Startup` class, I have configured the following auth server options:

    OAuthAuthorizationServerOptions OAuthServerOptions = new OAuthAuthorizationServerOptions()
    {
        AllowInsecureHttp = true,
        TokenEndpointPath = new PathString(&quot;/api/v1/token&quot;),
        AccessTokenExpireTimeSpan = TimeSpan.FromDays(1),
        Provider = new SimpleAuthorizationServerProvider()
    };

After this, which option are we supposed to use to actually enable bearer authentication?  There seem to be two variations on the Internet.

**Option 1:**

    app.UseOAuthAuthorizationServer(OAuthServerOptions);
    app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());

**Option 2:**

    app.UseOAuthBearerTokens(OAuthServerOptions);

I have tested them both and the results are the same.

What are the difference between these options?  When are we supposed to use which?

UseOAuthBearerTokens vs UseOAuthBearerAuthentication

Is there a way to display all enums as their string value in swagger instead of their int value? 

I want to be able to submit POST actions and put enums according to their string value without having to look at the enum every time. 

I tried `DescribeAllEnumsAsStrings` but the server then receives strings instead of the enum value which is not what we&#39;re looking for. 

Has anyone solved this?

Edit:

    public class Letter 
    {
    	[Required]
    	public string Content {get; set;}
    	
    	[Required]
    	[EnumDataType(typeof(Priority))]
    	public Priority Priority {get; set;}
    }
    
    
    public class LettersController : ApiController
    {
    	[HttpPost]
    	public IHttpActionResult SendLetter(Letter letter)
    	{
    		// Validation not passing when using DescribeEnumsAsStrings
    		if (!ModelState.IsValid)
    			return BadRequest(&quot;Not valid&quot;)
    		
    		..
    	}
    
    	// In the documentation for this request I want to see the string values of the enum before submitting: Low, Medium, High. Instead of 0, 1, 2
    	[HttpGet]
    	public IHttpActionResult GetByPriority (Priority priority)
    	{
    		
    	}
    }
    
    
    public enum Priority
    {
    	Low, 
    	Medium,
    	High
    }

Swagger UI Web Api documentation Present enums as strings?

Let&#39;s assume this is my action method

	public IHttpActionResult Get(int id)
	{
		var status = GetSomething(id);
		if (status)
		{
			return Ok();
		}
		else
		{
			return NotFound();
		}
	}

Test will be

    var httpActionResult = controller.Get(1);

How do I check my http status code after this?


How do I unit test web api action method when it returns IHttpActionResult?

First I&#39;ll sketch my project:

For my internship I need to add functionality to an existing system. A 3rd party client must be able to access data from AX Webservices once he is authorised by the user via OAuth2. I understand that I need to make a &#39;proxy web service&#39; whereto the client can make its calls and that calls the AX services but I am a bit unsure about the OAuth2 part. Most tutorials and guides are about using ASP.NET&#39;s Identity for Facebook or Google-logins. I do not need that, I need to use existing credentials so I need to make my own OAuth2 service. 

I find it hard to find tutorials, guides or explanations on this. I understand OAuth2 and what needs to be done, but I have never done such a thing before and find it hard to start. The closest thing to what I need that I found is this [github repo link][1], but the solution does not build.

What I had in mind is making an ASP.NET MVC Website where clients (3rd parties) can register themselves and acquire their Client ID&#39;s. With ASP.NET API I wanted to create the API that take the required tokens and parameters, and then access the Dyn AX services.

Is this correct or am I entirely wrong? Any help or links regarding building your own oauth2 server/service would be nice.


  [1]: https://github.com/ErikSchierboom/basicoauth2server.persistent

How to implement oauth2 server in ASP.NET MVC 5 and WEB API 2

Yes, I know what you are thinking - yet another CORS question, but this time I&#39;m stumped.

So to start off, the actual error message:

&gt; XMLHttpRequest cannot load http://localhost/Foo.API/token. The
&gt; value of the &#39;Access-Control-Allow-Origin&#39; header in the response must
&gt; not be the wildcard &#39;*&#39; when the request&#39;s **credentials mode is
&gt; &#39;include&#39;**. Origin &#39;http://localhost:5000&#39; is therefore not allowed
&gt; access. The credentials mode of requests initiated by the
&gt; XMLHttpRequest is controlled by the withCredentials attribute.

I&#39;m not sure what is meant by *credentials mode is &#39;include&#39;*?

So when I perform the request in postman, I experience **no** such error:

[![enter image description here][1]][1]

But when I access the same request through my angularjs web app, I am stumped by this error. Here is my angualrjs request/response. As you&#39;ll see the response is `OK 200`, but I still receive the CORS error:

**Fiddler Request and Response:**

The following image demonstrates the request and response from web front-end to API

[![Fiddler][2]][2]

So based on all the other posts I&#39;ve read online, it *seems* like I&#39;m doing the right thing, that&#39;s why I cannot understand the error. Lastly, here is the code I use within angualrjs (login factory):

[![enter image description here][4]][4]

CORS Implementation in API - Reference purposes:

Method 1 used:

    public static class WebApiConfig
    {
        public static void Register(HttpConfiguration config)
        {
            EnableCrossSiteRequests(config);
        }
    
        private static void EnableCrossSiteRequests(HttpConfiguration config)
        {
            var cors = new EnableCorsAttribute(&quot;*&quot;, &quot;*&quot;, &quot;*&quot;)
            {
                SupportsCredentials = true
            };
            config.EnableCors(cors);
        }
    }

Method 2 used:

    public void Configuration(IAppBuilder app)
    {
        HttpConfiguration config = new HttpConfiguration();
     
        ConfigureOAuth(app);
     
        WebApiConfig.Register(config);
        app.UseCors(Microsoft.Owin.Cors.CorsOptions.AllowAll);
        app.UseWebApi(config);
    
    }


  [1]: https://i.stack.imgur.com/f35Se.png
  [2]: https://i.stack.imgur.com/Y6jdT.png
  [3]: https://i.stack.imgur.com/9TXos.png
  [4]: https://i.stack.imgur.com/C5ewk.png

CORS: credentials mode is &#39;include&#39;

Just upgraded an ASP.NET MVC4 project to use Unity.WebApi version 5.0.0.0 and it requires System.Web.Http v 5.0.0.0 as per the following error:

    Assembly &#39;Unity.WebApi, Version=5.1.0.0, Culture=neutral, PublicKeyToken=43da31bc42a85347&#39; uses &#39;System.Web.Http, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35&#39; which has a higher version than referenced assembly &#39;System.Web.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35&#39;   

I am currently referencing System.Web.Http v4.0 but have the following NuGet packages upgraded to their respective latest versions:

 - ANTLRv3
 - Microsoft ASP.NET Universal Providers 
 - Microsoft.Web.Infrastructure 
 - Microsoft ASP.NET MVC  
 - Microsoft ASP.NET Razor 
 - Microsoft ASP.NET Universal Providers Core Libraries
 - Microsoft ASP.NET Universal Providers
 - Microsoft ASP.NET Web API 2 Client
 - Microsoft ASP.NET Web API 2 Core  
 - Microsoft ASP.NET Web API 2 Web Host
 - Microsoft ASP.NET Web API 2
 - Microsoft ASP.NET Web Page
 - Microsoft.Web.Infrastructure
 - WebGrease 

   via NuGet.  I have not listed relevant JavaScript libraries such as Micrososft.jQuery.Unobtrusive Validation, etc.  

What is the NuGet package to upgrade System.Web.Http or do I have to do this manually?


Where can I find a NuGet package for upgrading to System.Web.Http v5.0.0.0?

The URL I&#39;m trying to let work is one in the style of: http://somedomain.com/api/people/staff.33311 (just like sites as LAST.FM allow all sort of signs in their RESTFul &amp; WebPage urls, for example &quot;[http://www.last.fm/artist/psy&#39;aviah][1]&quot; is a valid url for LAST.FM).

What works are following scenarios:
- http://somedomain.com/api/people/ - which returns all people
- http://somedomain.com/api/people/staff33311 - would work as well, but it&#39;s not what I&#39;m after
I&#39;d want the url to accept a &quot;dot&quot;, like the example below
- http://somedomain.com/api/people/staff.33311 - but this gives me a 

    HTTP Error 404.0 - Not Found
    The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.


I&#39;ve set up following things:

01. The controller &quot;PeopleController&quot;

        public IEnumerable&lt;Person&gt; GetAllPeople()
        {
            return _people;
        }

        public IHttpActionResult GetPerson(string id)
        {
            var person = _people.FirstOrDefault(p =&gt; p.Id.ToLower().Equals(id.ToLower()));
            if (person == null)
                return NotFound();

            return Ok(person);
        }    



02. The WebApiConfig.cs

        public static void Register(HttpConfiguration config)
        {
            // Web API configuration and services

            // Web API routes
            config.MapHttpAttributeRoutes();

            config.Routes.MapHttpRoute(
                name: &quot;DefaultApi&quot;,
                routeTemplate: &quot;api/{controller}/{id}&quot;,
                defaults: new { id = RouteParameter.Optional }
            );
        }


I already tried following all the tips of this blogpost http://www.hanselman.com/blog/ExperimentsInWackinessAllowingPercentsAnglebracketsAndOtherNaughtyThingsInTheASPNETIISRequestURL.aspx but it still won&#39;t work.. I also think it&#39;s quite tedious and I wonder if there isn&#39;t another, better and more secure way.

We have our Id&#39;s internally like this, so we&#39;re going to have to find a solution to fit the dot in one way or another, preferably in the style of &quot;&lt;CATEGORY&gt;.&lt;NUMERICIC&gt;&quot; but I&#39;m open to alternative suggestions for urls if need be...


  [1]: http://www.last.fm/artist/psy%27aviah

Dot character &#39;.&#39; in MVC Web API 2 for request such as api/people/STAFF.45287

**UPDATE**

Thanks for all the answers. I am on a new project and it looks like I&#39;ve finally got to the bottom of this: It looks like the following code was in fact to blame:


    public static HttpResponseMessage GetHttpSuccessResponse(object response, HttpStatusCode code = HttpStatusCode.OK)
    {
        return new HttpResponseMessage()
        {
            StatusCode = code,
            Content = response != null ? new JsonContent(response) : null
        };
    }

elsewhere...
           
    public JsonContent(object obj)
    {
        var encoded = JsonConvert.SerializeObject(obj, Newtonsoft.Json.Formatting.None, new JsonSerializerSettings { NullValueHandling = NullValueHandling.Ignore } );
        _value = JObject.Parse(encoded);
        
        Headers.ContentType = new MediaTypeHeaderValue(&quot;application/json&quot;);
    }

I had overlooked the innocuous looking JsonContent assuming it was WebAPI but no.

This is used _everywhere_... Can I just be the first to say, wtf? Or perhaps that should be &quot;Why are they doing this?&quot;

-----------------------------------

*original question follows*


One would have thought this would be a simple config setting, but it&#39;s eluded me for too long now.

I have looked at various solutions and answers:

https://gist.github.com/rdingwall/2012642

doesn&#39;t seem to apply to latest WebAPI version...

The following doesn&#39;t seem to work - property names are still PascalCased.


    var json = GlobalConfiguration.Configuration.Formatters.JsonFormatter;

    json.UseDataContractJsonSerializer = true;
    json.SerializerSettings.NullValueHandling = Newtonsoft.Json.NullValueHandling.Ignore;

    json.SerializerSettings.ContractResolver = new CamelCasePropertyNamesContractResolver(); 

Mayank&#39;s answer here: https://stackoverflow.com/questions/23370619/camelcase-json-webapi-sub-objects-nested-objects-child-objects seemed like an unsatisfactory but workable answer until I realised these attributes would have to be added to generated code as we are using linq2sql...

Any way to do this automatically? This &#39;nasty&#39; has plagued me for a long time now. 


Web API 2: how to return JSON with camelCased property names, on objects and their sub-objects

Using Web API and using swashbuckle to generate swagger documentation,
I defined two different classes with the same name in two different namespaces. when I open swagger page in my browser it says

&gt; Conflicting schemaIds: Duplicate schemaIds detected for types A and B. See the config setting - &quot;UseFullTypeNameInSchemaIds&quot; for a potential workaround

full message:

&gt; 500 : {&quot;Message&quot;:&quot;An error has occurred.&quot;,&quot;ExceptionMessage&quot;:&quot;Conflicting schemaIds: Duplicate schemaIds detected for types A and B. See the config setting - \&quot;UseFullTypeNameInSchemaIds\&quot; for a potential workaround&quot;,&quot;ExceptionType&quot;:&quot;System.InvalidOperationException&quot;,&quot;StackTrace&quot;:&quot; at Swashbuckle.Swagger.SchemaRegistry.CreateRefSchema(Type type)\r\n at Swashbuckle.Swagger.SchemaRegistry.CreateInlineSchema(Type type)\r\n at Swashbuckle.Swagger.SchemaRegistry.&lt;CreateObjectSchema&gt;b__1f(JsonProperty prop)\r\n at System.Linq.Enumerable.ToDictionary[TSource,TKey,TElement](IEnumerable`1 source, Func`2 keySelector, Func`2 elementSelector, IEqualityComparer`1 comparer)\r\n at Swashbuckle.Swagger.SchemaRegistry.CreateObjectSchema(JsonObjectContract jsonContract)\r\n at Swashbuckle.Swagger.SchemaRegistry.CreateDefinitionSchema(Type type)\r\n at Swashbuckle.Swagger.SchemaRegistry.GetOrRegister(Type type)\r\n at Swashbuckle.Swagger.SwaggerGenerator.CreateOperation(ApiDescription apiDesc, SchemaRegistry schemaRegistry)\r\n at Swashbuckle.Swagger.SwaggerGenerator.CreatePathItem(IEnumerable`1 apiDescriptions, SchemaRegistry schemaRegistry)\r\n at Swashbuckle.Swagger.SwaggerGenerator.&lt;&gt;c__DisplayClass7.&lt;GetSwagger&gt;b__4(IGrouping`2 group)\r\n at System.Linq.Enumerable.ToDictionary[TSource,TKey,TElement](IEnumerable`1 source, Func`2 keySelector, Func`2 elementSelector, IEqualityComparer`1 comparer)\r\n at Swashbuckle.Swagger.SwaggerGenerator.GetSwagger(String rootUrl, String apiVersion)\r\n at Swashbuckle.Application.SwaggerDocsHandler.SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)\r\n at System.Net.Http.HttpMessageInvoker.SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)\r\n at System.Web.Http.Dispatcher.HttpRoutingDispatcher.SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)\r\n at System.Net.Http.DelegatingHandler.SendAsync(HttpRequestMessage request, CancellationToken cancellationToken)\r\n at System.Web.Http.HttpServer.&lt;SendAsync&gt;d__0.MoveNext()&quot;} http://localhost:24215/swagger/docs/v1

I don&#39;t want to change my classes&#39; names. How can I fix it?

swagger error: Conflicting schemaIds: Duplicate schemaIds detected for types A and B

I tried to follow the steps at http://enable-cors.org/server_aspnet.html
to have my RESTful API (implemented with ASP.NET WebAPI2) work with cross origin requests (CORS Enabled). It&#39;s not working unless I modify the web.config.

I installed WebApi Cors dependency:

    install-package Microsoft.AspNet.WebApi.Cors -ProjectName MyProject.Web.Api

Then in my `App_Start` I&#39;ve got the class `WebApiConfig` as follows:

    public static class WebApiConfig
    {
        public static void Register(HttpConfiguration config)
        {
            var corsAttr = new EnableCorsAttribute(&quot;*&quot;, &quot;*&quot;, &quot;*&quot;);
            config.EnableCors(corsAttr);

            var constraintsResolver = new DefaultInlineConstraintResolver();

            constraintsResolver.ConstraintMap.Add(&quot;apiVersionConstraint&quot;, typeof(ApiVersionConstraint));
            config.MapHttpAttributeRoutes(constraintsResolver); 
            config.Services.Replace(typeof(IHttpControllerSelector), new NamespaceHttpControllerSelector(config));
            //config.EnableSystemDiagnosticsTracing(); 
            config.Services.Replace(typeof(ITraceWriter), new SimpleTraceWriter(WebContainerManager.Get&lt;ILogManager&gt;())); 
            config.Services.Add(typeof(IExceptionLogger), new SimpleExceptionLogger(WebContainerManager.Get&lt;ILogManager&gt;()));
            config.Services.Replace(typeof(IExceptionHandler), new GlobalExceptionHandler()); 
        }
    }

but after that I run the application, I request a resource with Fiddler like:
http://localhost:51589/api/v1/persons
and in the response I cannot see the HTTP headers that I should see such as:

* `Access-Control-Allow-Methods: POST, PUT, DELETE, GET, OPTIONS`
* `Access-Control-Allow-Origin: *`

Am I missing some step? I have tried with the following annotation on the controller:

`[EnableCors(origins: &quot;http://example.com&quot;, headers: &quot;*&quot;, methods: &quot;*&quot;)]`

Same result, no CORS enabled.

However, if I add the following in my web.config (without even installing the AspNet.WebApi.Cors dependency) it works:

    &lt;system.webServer&gt;

    &lt;httpProtocol&gt;
      &lt;!-- THESE HEADERS ARE IMPORTANT TO WORK WITH CORS --&gt;
      &lt;!--
      &lt;customHeaders&gt;
        &lt;add name=&quot;Access-Control-Allow-Origin&quot; value=&quot;*&quot; /&gt;
        &lt;add name=&quot;Access-Control-Allow-Methods&quot; value=&quot;POST, PUT, DELETE, GET, OPTIONS&quot; /&gt;
        &lt;add name=&quot;Access-Control-Allow-Headers&quot; value=&quot;content-Type, accept, origin, X-Requested-With, Authorization, name&quot; /&gt;
        &lt;add name=&quot;Access-Control-Allow-Credentials&quot; value=&quot;true&quot; /&gt;
      &lt;/customHeaders&gt;
      --&gt;
    &lt;/httpProtocol&gt;
    &lt;handlers&gt;
      &lt;!-- THESE HANDLERS ARE IMPORTANT FOR WEB API TO WORK WITH  GET,HEAD,POST,PUT,DELETE and CORS--&gt;
      &lt;!--
      
      &lt;remove name=&quot;WebDAV&quot; /&gt;
      &lt;add name=&quot;ExtensionlessUrlHandler-Integrated-4.0&quot; path=&quot;*.&quot; verb=&quot;GET,HEAD,POST,PUT,DELETE&quot; type=&quot;System.Web.Handlers.TransferRequestHandler&quot; preCondition=&quot;integratedMode,runtimeVersionv4.0&quot; /&gt;
      &lt;remove name=&quot;ExtensionlessUrlHandler-Integrated-4.0&quot; /&gt;
      &lt;remove name=&quot;OPTIONSVerbHandler&quot; /&gt;
      &lt;remove name=&quot;TRACEVerbHandler&quot; /&gt;
      &lt;add name=&quot;ExtensionlessUrlHandler-Integrated-4.0&quot; path=&quot;*.&quot; verb=&quot;*&quot; type=&quot;System.Web.Handlers.TransferRequestHandler&quot; preCondition=&quot;integratedMode,runtimeVersionv4.0&quot; /&gt;
    --&gt;
    &lt;/handlers&gt;
      
  &lt;/system.webServer&gt;

Any help would be much appreciated!

Thank you.

Asp.Net WebApi2 Enable CORS not working with AspNet.WebApi.Cors 5.2.3

I know that I can use `Url.Link()` to get URL of a specific route, but how can I get Web API base URL in Web API controller?

How to get base URL in Web API controller?

I would like the following architecture (I&#39;ve made up the product name for this example):

**Web API 2 application running on one server**
http://api.prettypictures.com

**MVC 5 client app running on another server**
http://www.webpics.com

I would like **www.webpics.com** client app to use the Pretty Pictures API to:

 - Register new accounts with username and password
 - Register new accounts with Facebook/Google/Twitter/Microsoft
 - Log in
 - Retrieve pictures

All of the above works except registering external accounts with Facebook, Google etc.

I cannot work out the correct flow to create an **external** account from a separate client user of the API.

I have studied most documents available on the authentication flow, like this:
![enter image description here][1]

I have read pretty much everything I can on the new Identity model in OWIN.

I&#39;ve examined the SPA template in Visual Studio 2013. It demonstrates how to do most of what I need but only when the client and the API are on the same host; if I want multiple clients accessing my API and being able to let users sign up via Google etc. it doesn&#39;t work and as far as I can tell the OWIN authentication flow breaks.

Here is the flow so far:

- User browses to **www.webpics.com/Login**
- **www.webpics.com** calls **api.prettypictures.com/Account/ExternalLogins** (with a **returnUrl** set to go back to a callback at **www.webpics.com**) and displays the resulting links to the user
- The user clicks &quot;Google&quot;
- The browser redirects to **api.prettypictures.com/Account/ExternalLogin** with the name of the provider etc.
- The API&#39;s **ExternalLogin** action instantiates a challenge to **google.com**
- The browser is redirected to **google.com**
- The user enters their username and password (if they are not already logged in to **google.com**)
- **google.com** now presents the security clearance: **&quot;api.prettypictures.com&quot; would like access to your email address, name, wife, children etc. Is this OK?**
- User clicks &quot;Yep&quot; and is taken back to **api.prettypictures.com/Account/ExternalLogin** with a cookie that Google has set.

This is where I&#39;ve got stuck. What is supposed to happen next is somehow the client app should be notified that the user has successfully authenticated with **google.com** and be given a single use access code to swap for an access token later on. The client app should have the opportunity, if necessary, to prompt the user for a username to associate with their **google.com** login.

I don&#39;t know how to facilitate this.

In fact at this point the browser ends up sat at the **api.prettypictures.com/Account/ExternalLogin** endpoint after the callback from Google. The API is signed in for Google but the client doesn&#39;t know how to deal with that. Should I pipe that cookie back to **www.webpics.com**?

In the SPA app, it is done via AJAX and **google.com** will return an token as a URL fragment and it all works nicely because it all sits on one domain. But that defies much of the point of having an &quot;API&quot; that multiple clients can fully use.

Help!

  [1]: http://i.stack.imgur.com/fF67o.png

Registering Web API 2 external logins from multiple API clients with OWIN Identity

This is probably something very basic, but I am having trouble figuring out where I am going wrong. 

I am trying to grab a string from the body of a POST, but &quot;jsonString&quot; only shows as null. I also want to avoid using a model, but maybe this isn&#39;t possible. The piece of code that I am hitting with PostMan is this chunk:
 

    [Route(&quot;Edit/Test&quot;)]
    [HttpPost]
    public void Test(int id, [FromBody] string jsonString)
    {
        ...
    }

Maybe it is something I am doing incorrectly with postman, but I have been trying to use &quot;=test&quot; (as seen in other questions asked about this topic) in the value section of the body - x-www-form-urlencoded section with the key as jsonString and nothing. I have also tried using raw - text and raw - text/plain. I get the id so I know the url is correct. Any help with this would be greatly appreciated. 

PostMan is set up like this currently:

&lt;!-- language: none --&gt;

    POST http://localhost:8000/Edit/Test?id=111
    key = id  value = 111
    Body - x-www-form-urlencoded
    key = jsonString  value = &quot;=test&quot;



FromBody string parameter is giving null

When I try to start :

    WebApp.Start&lt;SrvcHst&gt;(new StartOptions { Port = 9956, 
         ServerFactory = &quot;Microsoft.Owin.Host.HttpListener&quot; });

I get the following exception. What could be the root cause?


    System.MissingMemberException was caught
      HResult=-2146233070
      Message=The server factory could not be located for the given input: Microsoft.Owin.Host.HttpListener
      Source=Microsoft.Owin.Hosting
      StackTrace:
           at Microsoft.Owin.Hosting.Engine.HostingEngine.ResolveServerFactory(StartContext context)
           at Microsoft.Owin.Hosting.Engine.HostingEngine.Start(StartContext context)
           at Microsoft.Owin.Hosting.Starter.DirectHostingStarter.Start(StartOptions options)
           at Microsoft.Owin.Hosting.Starter.HostingStarter.Start(StartOptions options)
           at Microsoft.Owin.Hosting.WebApp.StartImplementation(IServiceProvider services, StartOptions options)
           at Microsoft.Owin.Hosting.WebApp.Start(StartOptions options)
           at Microsoft.Owin.Hosting.WebApp.Start[TStartup](StartOptions options)

OWIN HttpListener not located

I have a controller with the following signature:

    [Route(&quot;products/filter/{apc=apc}/{xpc=xpc}/{sku=sku}&quot;)]
    public IHttpActionResult Get(string apc, string xpc, int? sku)
    { ... }

I call this method with following URIs:

 - ~/api/products/filter?apc=AA&amp;xpc=BB
 - ~/api/products/filter?sku=7199123

The first URI works without issue. The second one has a strange side effect. Even though the default values for apc and xpc should be null when not provided, the parameters are actually their names. I can overcome this by adding the additional logic:

    apc = (apc == &quot;apc&quot;) ? null : apc;
    xpc = (xpc == &quot;xpc&quot;) ? null : xpc;

This seems like a hack, and would be problematic if value passed was ever equal to the parameter name. 

Is there a way to define the Route without this side effect? 

Web API optional parameters

I upgraded Microsoft.AspNetCore from 2.0.3 to 2.0.5 and my WebAPI project, although running successfully locally, fails to start in production (IIS). Everything was fine in production until this upgrade. The error message produced in the log directory is as follows:

    Error:
      An assembly specified in the application dependencies manifest (MyProject.WebAPI.deps.json) was not found:
        package: &#39;Microsoft.AspNetCore.Mvc.Abstractions&#39;, version: &#39;2.0.2&#39;
        path: &#39;lib/netstandard2.0/Microsoft.AspNetCore.Mvc.Abstractions.dll&#39;
    
      This assembly was expected to be in the local runtime store as the application was published using the following target manifest files:
        aspnetcore-store-2.0.5.xml

Could someone explain to me the details of exactly what this means? I assume it&#39;s a version mismatch of sorts, but why is this occurring? I thought the latest stable releases of NuGet packages weren&#39;t supposed to have such issues.

I was able to resolve the issue by downgrading Microsoft.AspNetCore.All from 2.0.5 to 2.0.3, but would like to find a better solution to the issue so I can use the most up-to-date version of this package.

An assembly specified in the application dependencies manifest (...) was not found

I have created a WebApi and a Cordova application.
I am using HTTP requests to communicate between the Cordova application and the WebAPI.
In the WebAPI, I&#39;ve implemented OAuth Bearer Token Generation.

    public void ConfigureOAuth(IAppBuilder app)
        {
            var oAuthServerOptions = new OAuthAuthorizationServerOptions
            {
                AllowInsecureHttp = true,
                TokenEndpointPath = new PathString(&quot;/token&quot;),
                AccessTokenExpireTimeSpan = TimeSpan.FromDays(1),
                Provider = new SimpleAuthorizationServerProvider(new UserService(new Repository&lt;User&gt;(new RabbitApiObjectContext()), new EncryptionService()))
            };

            // Token Generation
            app.UseOAuthAuthorizationServer(oAuthServerOptions);
            app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions());

        }

and this is inside the `SimpleAuthorizationServerProvider` implementation

     public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
        {
           context.OwinContext.Response.Headers.Add(&quot;Access-Control-Allow-Origin&quot;, new[] { &quot;*&quot; });

            // A little hack. context.UserName contains the email
            var user = await _userService.GetUserByEmailAndPassword(context.UserName, context.Password);

            if (user == null)
            {
                context.SetError(&quot;invalid_grant&quot;, &quot;Wrong email or password.&quot;);
                return;
            }

            var identity = new ClaimsIdentity(context.Options.AuthenticationType);
            identity.AddClaim(new Claim(&quot;sub&quot;, context.UserName));
            identity.AddClaim(new Claim(&quot;role&quot;, &quot;user&quot;));

            context.Validated(identity);
        }

 
after a successful login request to the API from the Cordova app, I receive the following JSON

    {&quot;access_token&quot;:&quot;some token&quot;,&quot;token_type&quot;:&quot;bearer&quot;,&quot;expires_in&quot;:86399}

The problem is, that I require more information about the user. For example, I have a UserGuid field in the database and I want to send it to the Cordova app when the login is successful and to use it later in other requests. Can I include other information to return to the client, other than `&quot;access_token&quot;, &quot;token_type&quot;` and `&quot;expires_in&quot;`? If not, how can I get the user in the API based on the `access_token`?


----------


**EDIT:**

I think that I found a workaround. 
I added the following code inside `GrantResourceOwnerCredentials`

    identity.AddClaim(new Claim(ClaimTypes.Name, user.UserGuid.ToString()));

and after that, I access the GUID inside my controller like this: `User.Identity.Name`

I also can add the the guid with a custom name `identity.AddClaim(new Claim(&quot;guid&quot;, user.UserGuid.ToString()));`

I&#39;m still interested to know if there is a way to return more data to the client with the bearer token JSON.

Return more info to the client using OAuth Bearer Tokens Generation and Owin in WebApi

Sometimes I get the following error while I was doing HttpWebRequest to a WebService. I copied my code below too.

---

&lt;pre&gt;
System.Net.WebException: Unable to connect to the remote server ---&gt; System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:80
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)&lt;/b&gt;
   at System.Net.Sockets.Socket.InternalConnect(EndPoint remoteEP)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket&amp; socket, IPAddress&amp; address, ConnectSocketState state, IAsyncResult asyncResult, Int32 timeout, Exception&amp; exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetRequestStream()
&lt;/pre&gt;

---

    ServicePointManager.CertificatePolicy = new TrustAllCertificatePolicy();
    HttpWebRequest request = (HttpWebRequest)WebRequest.Create(url);

    request.PreAuthenticate = true;
    request.Credentials = networkCredential(sla);
    request.Method = WebRequestMethods.Http.Post;
    request.ContentType = &quot;application/x-www-form-urlencoded&quot;;
    request.Timeout = v_Timeout * 1000;
                
    if (url.IndexOf(&quot;asmx&quot;) &gt; 0 &amp;&amp; parStartIndex &gt; 0)
    {
        AppHelper.Logger.Append(&quot;#############&quot; + sla.ServiceName);
                
        using (StreamWriter reqWriter = new StreamWriter(request.GetRequestStream()))
        {                        
            while (true)
            {
                int index01 = parList.Length;
                int index02 = parList.IndexOf(&quot;=&quot;);
                            
                if (parList.IndexOf(&quot;&amp;&quot;) &gt; 0)
                    index01 = parList.IndexOf(&quot;&amp;&quot;);

                string parName = parList.Substring(0, index02);
                string parValue = parList.Substring(index02 + 1, index01 - index02 - 1);
                            
                reqWriter.Write(&quot;{0}={1}&quot;, HttpUtility.UrlEncode(parName), HttpUtility.UrlEncode(parValue));

                 if (index01 == parList.Length)
                     break;

                 reqWriter.Write(&quot;&amp;&quot;);
                 parList = parList.Substring(index01 + 1);
             }
         }
     }
     else
     {
         request.ContentLength = 0;
     }

     response = (HttpWebResponse)request.GetResponse();

All asp.net Web-Api2 Solutions on Gang of Coders

Total of 21 asp.net Web-Api2 Solutions