Technically not today, but it was last night, and it's an issue I've been having for too long.
I've agreed to do a mobile app for a friend with a business and website and so I've determined creating a Web API to expose the data is the best route to go (since the mobile app will need to display data that's on his existing website, the website can use it, and another website will use it).
I've done part of that but I'm having a fuck of a time trying to figure out how to secure the Web API (A standard .NET Web API). Apparently IdentityServer3 is the coolest thing and best option and so I went that route, but I guess I'm too stupid to use it because I'm having a hell of a time trying to figure it out. It's just all new and I'm working on this by myself and so it's overwhelming and I'm not smart enough. I think I've determined the "client credentials" flow will work (for securing the API for the website; "hybrid" for mobile I guess) and not be way more than is necessary and I made a bit of head-way last night so I might be fairly close to getting the security half working.
Bah. Doesn't help my motivation is already in the shitter for basically everything, so a project that's big and constantly stumping me isn't something I'm jumping to work on. FML