I am currently on the .Net 3.5 stack (including VS2008 tools) and will not be updated anytime soon. What options are available to me for creating an unreliable API that will be used by my own web application. I see my options as:
- MVC2 (less choice, as the team is not comfortable)
- WCF with HTTP toolkit. (I donβt know which version I should look for for my stack)
I need the following functions:
- Cookie authentication (I really like the ActionCilter approach for MVC for this)
- Resource-based authorization (User, account, etc. Again, I like the AF approach to this)
- Everything works under HTTPS
My uncertainty about which versions, etc. I browse for my stack, and what are the arguments for and against each?
source share