Introduction

In this chapter, we are going to look at what ServiceStack has to offer when it comes to security and different forms of authentication. ServiceStack has a built-in authentication model that is highly configurable by just a few common interfaces and comes with a large number of implementations already built-in. A lot of the supported methods of authentication are focused around the OAuth and OpenID of popular online applications, such as Facebook, Twitter, Google, and others. Both OAuth and OpenID allow web services and applications to reliably confirm the identity of a user in a familiar and convenient way for your clients. This is also good for developers as it removes the burden and potential risk of storing the user's credentials. Once the user has their identity successfully verified (authenticated), ServiceStack also helps you in controlling what access a user has in your system (authorization), by providing attributes for your web services and their methods.

Authentication...