title: Enable token based auth in WebAPI based service with SSL enabled
body: <p>I have a WebAPI/OWIN based service with custom middleware for certificate based authentication. Currently it requires SSL cert to connect. Now I have a requirement of adding a support for token based auth so instead of the certificate, the client will add JWT token in the request header. So I added another middleware to handle the tokens but the server rejects the incoming requests from the HTTP layer with error 12044 (A certificate is required to complete client authentication).</p>
  
  <p>Is, the way I am handling the tokens in the custom middleware, the problem ? Should I use the UseOAuthBearerTokens or UseOAuthAuthorizationServer instead?</p>
  
  <p>I have looked on the web but couldn't find scenario quite like this but I am sure some if not a lot of people would have encountered it.</p>
  
  <p>What is the standard way of fixing it or how do I workaround this problem ?</p>