Adding a Custom Authentication Filter
Please for the love of all that is holy, don't do this. There are many great solutions out there now. I recommend Azure AD (cheap), Auth0(freeish), or Identity Server(open sou). This was a pretty terrible implementation that was meant as a stopgap.
I have an API that I wish to lock down via an . . .
Cover image credit: http://whoiskevinrich.com