{"action":"created","issue":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2126","labels_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2126/labels{/name}","comments_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2126/comments","events_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2126/events","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2126","id":115268235,"number":2126,"title":"ApiController to modify user info","user":{"login":"Zenuka","id":5391012,"avatar_url":"https://avatars.githubusercontent.com/u/5391012?v=3","gravatar_id":"","url":"https://api.github.com/users/Zenuka","html_url":"https://github.com/Zenuka","followers_url":"https://api.github.com/users/Zenuka/followers","following_url":"https://api.github.com/users/Zenuka/following{/other_user}","gists_url":"https://api.github.com/users/Zenuka/gists{/gist_id}","starred_url":"https://api.github.com/users/Zenuka/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zenuka/subscriptions","organizations_url":"https://api.github.com/users/Zenuka/orgs","repos_url":"https://api.github.com/users/Zenuka/repos","events_url":"https://api.github.com/users/Zenuka/events{/privacy}","received_events_url":"https://api.github.com/users/Zenuka/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-05T11:50:49Z","updated_at":"2015-11-05T15:34:53Z","closed_at":"2015-11-05T15:34:53Z","body":"Hey, I'm creating an ApiController to set the current user's culture claim to the culture he/she selected. Now I want to call this from client applications as well as when the user is logged in on the identity server. Now I have 2 options to secure the controller; HostAuthentication for pages on identity server or via Access token from the client. Of course I could make 2 controllers for both authentication forms but would HostAuthentication suffice? So you need to be logged in on the identity server to change your culture. Any draw backs? I'm looking for some advise ;-)"},"comment":{"url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/comments/154095335","html_url":"https://github.com/IdentityServer/IdentityServer3/issues/2126#issuecomment-154095335","issue_url":"https://api.github.com/repos/IdentityServer/IdentityServer3/issues/2126","id":154095335,"user":{"login":"Zenuka","id":5391012,"avatar_url":"https://avatars.githubusercontent.com/u/5391012?v=3","gravatar_id":"","url":"https://api.github.com/users/Zenuka","html_url":"https://github.com/Zenuka","followers_url":"https://api.github.com/users/Zenuka/followers","following_url":"https://api.github.com/users/Zenuka/following{/other_user}","gists_url":"https://api.github.com/users/Zenuka/gists{/gist_id}","starred_url":"https://api.github.com/users/Zenuka/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zenuka/subscriptions","organizations_url":"https://api.github.com/users/Zenuka/orgs","repos_url":"https://api.github.com/users/Zenuka/repos","events_url":"https://api.github.com/users/Zenuka/events{/privacy}","received_events_url":"https://api.github.com/users/Zenuka/received_events","type":"User","site_admin":false},"created_at":"2015-11-05T15:34:53Z","updated_at":"2015-11-05T15:34:53Z","body":"Nevermind, apparently you can use both. Use the access token for clients and use HostAuthentication attribute to authenticate local logged in users... I tried it before but I just tested it again and it works :-)"}}