{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/143","labels_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/143/labels{/name}","comments_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/143/comments","events_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/143/events","html_url":"https://github.com/IdentityManager/IdentityManager/issues/143","id":86831297,"number":143,"title":"IdentityManager ApiController Usage via AJAX","user":{"login":"bqduong","id":2935035,"avatar_url":"https://avatars.githubusercontent.com/u/2935035?v=3","gravatar_id":"","url":"https://api.github.com/users/bqduong","html_url":"https://github.com/bqduong","followers_url":"https://api.github.com/users/bqduong/followers","following_url":"https://api.github.com/users/bqduong/following{/other_user}","gists_url":"https://api.github.com/users/bqduong/gists{/gist_id}","starred_url":"https://api.github.com/users/bqduong/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bqduong/subscriptions","organizations_url":"https://api.github.com/users/bqduong/orgs","repos_url":"https://api.github.com/users/bqduong/repos","events_url":"https://api.github.com/users/bqduong/events{/privacy}","received_events_url":"https://api.github.com/users/bqduong/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-06-10T04:18:23Z","updated_at":"2015-06-12T14:12:24Z","closed_at":null,"body":"Hi,\r\n\r\nI currently have a solution that uses one Identity login to access both my main web application and IdentityManager.  I want to access IdentityManager's API through AJAX calls made within my client-side JavaScript when I am in my main application.  Is there a way I can get/request an AntiForgeryToken in this situation so that I may pass it along to the API controller without getting an 'unauthorized' error?"},"comment":{"url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/comments/111507304","html_url":"https://github.com/IdentityManager/IdentityManager/issues/143#issuecomment-111507304","issue_url":"https://api.github.com/repos/IdentityManager/IdentityManager/issues/143","id":111507304,"user":{"login":"brockallen","id":649492,"avatar_url":"https://avatars.githubusercontent.com/u/649492?v=3","gravatar_id":"","url":"https://api.github.com/users/brockallen","html_url":"https://github.com/brockallen","followers_url":"https://api.github.com/users/brockallen/followers","following_url":"https://api.github.com/users/brockallen/following{/other_user}","gists_url":"https://api.github.com/users/brockallen/gists{/gist_id}","starred_url":"https://api.github.com/users/brockallen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brockallen/subscriptions","organizations_url":"https://api.github.com/users/brockallen/orgs","repos_url":"https://api.github.com/users/brockallen/repos","events_url":"https://api.github.com/users/brockallen/events{/privacy}","received_events_url":"https://api.github.com/users/brockallen/received_events","type":"User","site_admin":false},"created_at":"2015-06-12T14:12:24Z","updated_at":"2015-06-12T14:12:24Z","body":"No, you need an access token. This is a scenario that I think technically could be supported, but I've not tried wiring it up -- there's an ExternalBearerTokenConfiguration security config class that's what you'd use. But I've not fully tested or fleshed that out. It might work if you turn all the knobs the right way.\r\n\r\nI'll leave this issue open as a reminder for myself to build a sample to ensure it's possible."}}