title: What is the best way to implement Security in WebApi 2?
body: <p>Although Web API 2 provides a build-in Authentication implementation using OAuth, but when I read about <a href="http://hueniverse.com/2010/09/oauth-bearer-tokens-are-a-terrible-idea/" rel="nofollow">OAuth Bearer Tokens</a>, I get confused. Using Basic authentication is not a choice for me as we don't want to use SSL.</p>
  
  <p>What do you think is the best security implementation for a publicly accessed API?</p>