推荐订阅源

1. Post: http://localhost:11804/My/Comment   

 for plain html parameter submission, like the GET in URL:

Request Header:

User-Agent: Fiddler

 Content-Length: 33  

Host: localhost:11804  

Content-Type: application/x-www-form-urlencoded

Request Body:

url=go&url2=2&lese=sss

 public class MyController : Controller
{
       public class CommentInputModel
        {
            public string Url { get; set; }
            public string Url2 { get; set; }
           
        }

       [HttpPost]
        public ActionResult Comment(CommentInputModel model,string lese)
        {
            return null;
        }
}

2.Post:http://localhost:11804/Account/Login   have  [ValidateAntiForgeryToken]

Request Header:

Content-Type: application/x-www-form-urlencoded
Cookie: __RequestVerificationToken=WAmjMYW6VXwFk21CU8zjfViWgKvW3703lBNcm7rij0cl2-Axh4_jiYkaZ_HcAmTMdca721sicaa2lAZmvYRe4IkS7shSydVTsRn7pB5EmCI1
Host: localhost:11804
Content-Length: 183

Request Body

__RequestVerificationToken=jqeqLyivYdNPWjlbLMAUf747vM1wdLcx5Xju5vbkv5S4k4kpin_z2KqbVMu07Vg2mOVLOt7ijhvOM4ranmZ73SpZwNxWfKlyOORSp8SDS7U1&UserName=admin&Password=111111&RememberMe=false

        [HttpPost]
        [AllowAnonymous]
        [ValidateAntiForgeryToken]
       // [OutputCache(NoStore = true, Duration = 0)]  
        public ActionResult Login(LoginModel model, string returnUrl)
        {
            if (ModelState.IsValid && WebSecurity.Login(model.UserName, model.Password, persistCookie: model.RememberMe))
            {
                return RedirectToLocal(returnUrl);
            }

            // If we got this far, something failed, redisplay form
            ModelState.AddModelError("", "The user name or password provided is incorrect.");
            return View(model);
        }


    public class LoginModel
    {
        [Required]
        [Display(Name = "User name")]
        public string UserName { get; set; }

        [Required]
        [DataType(DataType.Password)]
        [Display(Name = "Password")]
        public string Password { get; set; }

        [Display(Name = "Remember me?")]
        public bool RememberMe { get; set; }
    }

3. For JSON parameter submission:

Request Header:

User-Agent: Fiddler

 Host: localhost:4217

 Content-Type: application/json; charset=utf-8

Request Body

{“Number1″:”7″,”Number2″:”7″}

4.Get Authorize   http://localhost:52913/api/Tests/1

Hearder

User-Agent: Fiddler

Host: localhost:52913

Content-Length: 0

Authorization: Bearer fOtIuWy70pYnFZEfPgWrKjSXwbk5DXkNpuot2Psf4uZFcGkLHlDFSuJ1b4WvkjLwknIksUa9EMVA0w3b8YeYeeporLpimP6PfILj-WNco-2JwcN7cJc5WCT7LckqEQjdbJZRxYiOYyJo6EmNAo5F4gY0Jdpgx6veP2-

995vhIU2A1yorvNLBQDzYlVEoCymwOE8ZIp1ZOLJklAvDttOuAP5h150cUAVpwRavi8JIL3EI2kqNauY72_-

6qp916nDOrM1TIPS_HUElmWQMd31hLpB1UjJhb6vvVOdeQylToOJrATs8hrS5zOWLJPBrSV74llTSEO44XPsPorc8X9C6iUDZYoajz8wUDlbEccTenl41D2P5ui3ZG5ql5XYSoykbD9Ns44Nki_fVLLcuHfW-77d0ZmP9F5uORXHoRiLIfepU3tAXUHivTqJc0zX-hA9ZLYISHMR6zdpKx_3l0gbp23_E-

6hvu2d1FogI_TgxCm9T2e47r4lMeCNreaqD2cf6iUxlxG8sEpce8gTNK-8Le0xf709BtIzkFSaUekGDgPHVnwY6LsaWurjriB1rMyOQ

Bearer after is " access_token "

  // GET: api/Tests/5
        [ResponseType(typeof(Test))]
       // [Authorize(Roles = "Admin,User,Company,Counselor")]
       [Authorize]
        public IHttpActionResult GetTest(int id)
        {
            Test test = db.Tests.Find(id);
            if (test == null)
            {
                return NotFound();
            }

            return Ok(test);
        }

come from:

http://www.asp.net/web-api/overview/security/individual-accounts-in-web-api