Custom Authorization in Asp.net WebApi - what a mess? Custom Authorization in Asp.net WebApi - what a mess? asp.net asp.net