title: What is the recommended approach to secure .NET 4.0 Web API that uses unconventional authentication method?
body: <p>I have been researching on securing Web API and all the articles and books are pointing to use OAuth. But oauth is not suitable for my scenario as I don't need another system to authenticate the user. </p>
  
  <p>An additional complexity to that is we are using out of wallet questions instead of username/password to authenticate users.</p>
  
  <p>My application is an Angular UI front end with .NET 4.0 Web API backend.
  I am thinking of implementing token and claim based authentication in JWT to pass as barer token but I couldn't find the good resources/samples for .NET 4.0 Web API 1. I've seen many good articles on .NET 4.5 and OWIN middlewares but none of these are usable in .NET 4.0.</p>
  
  <p>I am still new to WEB API world so here are my questions.</p>
  
  <ol>
  <li><p>Is it the recommended approach to secure Web API 1, if not, what would you recommend?</p></li>
  <li><p>Can you give me some good articles/samples for Web API 1 security?</p></li>
  <li><p>I am thinking of using Thinktecture.IdentityModel.40 and again, I can't find good sample for .NET 4.0 version.</p></li>
  </ol>