There has been a lot of information available about accessing DNN WebAPI from within a module, however, there isn't a lot of info on how to access those APIs securely from another client, say Windows Client or Mobile. I've developed sample apps in Win Forms to access Core or Custom Web APIs keeping in mind Anti-Forgery and Module / Tab Permissions. Join me to get tips and tricks on writing WebAPIs in DNN that can be securely accessed (using Anti-Forgery and obeying Module Permission) from DNN Modules as well as outside.

1. Have Your DNN and Eat it Too
(On Any Other App)
Ash Prasad
Don’t forget to include #DNNCon in your tweets!
@DNNCon

2. Agenda
•
•
•
•
•
History of DNN Web API
What’s included in DNN Web API
Stuff that’s missing
How to bridge the gap
Let’s build a Mobile App!
Don’t forget to include #DNNCon in your tweets!
@DNNCon

3. History of DNN Web API
• First introduced in 6.2 (May2012)
• Called Services Framework
• Based on ASP.Net MVC
• New version released with 7.0 (Nov
2012)
• Called DNN Web API
• Based on ASP.Net Web API
Don’t forget to include #DNNCon in your tweets!
@DNNCon

4. What’s included in DNN Web
API
• RESTFul
• Seamless Authentication &
Autherization
• Integrates with Module/Tab Permission
• Anti Forgery
• Access to standard DNN Entities
• Portal Settings, Current User, Active Tab
• Helper JS library
• Works really well in Web Forms
Don’t forget to include #DNNCon in your tweets!
@DNNCon

5. Browser & Web API – Made for each
other
Don’t forget to include #DNNCon in your tweets!
@DNNCon

6. Mobile Apps and WebAPI – Love Brewing
Don’t forget to include #DNNCon in your tweets!
@DNNCon

7. So, What’s Missing ?
Just 4 things
Don’t forget to include #DNNCon in your tweets!
@DNNCon

8. 1. Login
..a way to login
Don’t forget to include #DNNCon in your tweets!
@DNNCon

9. 2. Shuttle Cookies
...between app and Web API
Don’t forget to include #DNNCon in your tweets!
@DNNCon

10. Example
.DOTNETNUKE is the Auth Cookie
Don’t forget to include #DNNCon in your tweets!
@DNNCon

11. 3. Antiforgery Token
..send to Web API
Don’t forget to include #DNNCon in your tweets!
@DNNCon

12. Example
..in pair, send both - from Page and Cookie
Don’t forget to include #DNNCon in your tweets!
@DNNCon

13. 4. Page and Module Security
..send Module & Tab Ids to Web API
Don’t forget to include #DNNCon in your tweets!
@DNNCon

14. Example
Don’t forget to include #DNNCon in your tweets!
@DNNCon

15. Next Steps
• Mobile Framework
• Another simple Web API
Don’t forget to include #DNNCon in your tweets!
@DNNCon

16. Mobile Frameworks – Xamarin
(C#)
Don’t forget to include #DNNCon in your tweets!
@DNNCon

17. Mobile Frameworks – Icenium (JS, Html5,
CSS3, KendoUI)
Don’t forget to include #DNNCon in your tweets!
@DNNCon

18. Mobile Frameworks – PhoneGap (JS,
Html5, CSS3)
Don’t forget to include #DNNCon in your tweets!
@DNNCon

19. New Simple Web API
• New DLL (Library)
• One Web API Method
• GetTabAndModuleId(string moduleName)
Don’t forget to include #DNNCon in your tweets!
@DNNCon

20. Architecture
Don’t forget to include #DNNCon in your tweets!
@DNNCon

21. Sample App (using Xamarin for
Android
Don’t forget to include #DNNCon in your tweets!
@DNNCon

22. Demo
Don’t forget to include #DNNCon in your tweets!
@DNNCon

23. Recap
•
•
•
•
Web APIs are great
We can make ‘em work on Mobile
Need a library
You can build Mobile Apps today!
Don’t forget to include #DNNCon in your tweets!
@DNNCon

24. THANKS TO ALL OF OUR GENEROUS
SPONSORS!
Don’t forget to include #DNNCon in your tweets!
@DNNCon