Court of Lord Zoltan v2

For the web service project I’m working on at the moment I need to be able to treat authorization differently based on the hostname of the URL that requests are made through. To state more clearly – these web services will have a ‘sandbox’ mode in addition to the real mode, and the mode a request will operate under is determined as part of the controller-selection phase early in the Web API request lifecycle.  So, say that my web services will be hosted on services.acme.com; the sandbox will simply be sandbox.services.acme.com. Please note – a discussion of how this is implemented is entirely outside the scope of this article; but I’ll just say that I’ve developed an in-house multi-tenancy layer for both MVC 4 and Web API that allows us to define ‘brands’ and, under those, you can then redefine content, controllers, and even the DI container that is used. These services are going to require caller-level authentication for most operations via SCRAM Authentication (RFC 5802) , and...