Suppose we have an application with multiple layers in .Net:
- Domain layer (entities)
- Data access layer (entity framework)
- Business layer
- Web Services layer (Web Api)
- Presentation layer (MVC)
Now I want to add token authentication for web services layer. The usual recomendation is to use a standar login/authentication implementation (libs, frameworks) and don't code it, so I want to use ASP .Net Identity token authentication. How I should do it?
I should put Asp .Net Identity in a class library? Create the tokens in business layer?