ASP.NET MVC & WEB API token authentication

Question

I have a question about the token bearer. I have two scenarios in my application. 1º is an admin panel that works with ASP.NET MVC and Angularjs and the 2nd is the WEB Api that exchanges requests with a WPF application. My question is about the token, if it is indifferent I use it for an ASP.NET MVC controller and a web api controller.

 public class AuthorizationServerProvider : OAuthAuthorizationServerProvider
{
    public override async Task ValidateClientAuthentication(OAuthValidateClientAuthenticationContext context)
    {
        context.Validated();            
    }

    public override async Task GrantResourceOwnerCredentials(OAuthGrantResourceOwnerCredentialsContext context)
    {
        context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { "*" });

        try
        {
            DbEngine db = new DbEngine();
            var user = db.AutenticacaoAPI(context.UserName, context.Password);
            var identity = new ClaimsIdentity(context.Options.AuthenticationType);

            if (user.Status)
            {
                identity.AddClaim(new Claim(ClaimTypes.Name, user.Value.ST_NOME));
                identity.AddClaim(new Claim(ClaimTypes.Email, user.Value.ST_LOGIN));
            }

            context.Validated(identity);
        }
        catch
        {
            context.SetError("Usuário e senha inválidos", "Error");
        }
    }
}

and the Controller code to request user information only to test the service

[Authorize]
    [HttpGet]
    public JsonResult UserInfo(string login)
    {
        using (DbEngine db = new DbEngine())
        {
            try
            {
                return new JsonResult
                {
                    Data = db.GetUser(login),
                    JsonRequestBehavior = JsonRequestBehavior.AllowGet

                };
            }
            catch (Exception ex)
            {
                return ex.ReturnException(HttpStatusCode.InternalServerError);
            }
        }
    }

Here is the return of the token

And here the call that returns this error even with the token in the header

I appreciate the help.

Answer 1

Your problem is not with the ASP.NET Identity or with the ASP.NET MVC, but when trying to serialize the Entity proxy Usuario.

This Proxy is created so that it is possible to perform the LazyLoad in the queries, then try to disable Lazyload and switch to using the .Include()) whenever necessary.