Using Token Based Authentication, the client application is not dependent on a specific authentication mechanism. The token is generated by the server if the user is authenticated. So to acces a specific ressource, the client must include the generated token in the header of subsequent requests and the Web API Server have some APIs to understand, validate the token and perform the autorizationfic authentication mechanism. The token is generated by the server if the user is authenticated. So to acces a specific ressource, the client must include the generated token in the header of subsequent requests and the Web API Server have some APIs to understand, validate the token and perform the autorization This approach provides Loose Coupling between client and the Web API. In my previous tutorial Angular JS Token-based Authentication using Asp.net Identity and Asp.net web API I have build an authentication server using a oAuth Bearer Token. In this tutorial, I will use JSON Web Token (JWT) , for more information about JWT please take a look at https://jwt.io/ JWT enable us to securely transfer data between server and client .