3. HTTP

11. config.Routes.MapHttpRoute( name: “TodosForTodoList", routeTemplate: "api/todolists/{id}/todos", defaults: new { controller = “todolists”, action = “GetTodos” } ); public IEnumerable GetTodos() { … }

12. config.MapHttpAttributeRoutes(); [HttpGet("api/todolists/{id}/todos")] public IEnumerable GetTodos(int id) { … }

13. [HttpGet(“Demographics/{zipcode?}")] public Demographics Get(int? zipcode) { … } [HttpGet("people/{id:int}")] public Person Get(int id) { … } [HttpGet("people/{name:alpha}")] public Person Get(string name) { … } [HttpGet("Demographics/{zipcode=98052}")] public Demographics Get(int zipcode) { … }

22. Free Friends

24. Why no COOKI ES !?!

26. Authorization Grant Access Token Authorization Request Access Token

27. Protected Resource Client Authorization Server Authorization Endpoint Token Endpoint Browser CODE 3 302 1 2 user User

28. Protected ResourceClient Authorization Server Authorization Endpoint Token Endpoint CODE 2 access tokenrefresh token Client 1 client

29. Protected ResourceClient authorization server Authorization Endpoint Token Endpoint 1 access token 2 refresh token Client Authorization: Bearer

30. Protected ResourceClient Authorization Server Authorization Endpoint Token Endpoint 2 access tokenrefresh token Client 1 client

31. Protected Resource Client