title: Where should I plugin the Authorization in Asp.net WebAPI?
body: <p>As I see I have 3 possible places to plug my stuff in the pipeline </p>
  
  <pre><code>1)     AuthorizationFilters
  
  2)     Action Filters
  
  3)     DelegatingHandler
  </code></pre>
  
  <p>The most obvious one is AuthorizationFilters , where I can decorate my actions/ controllers with my custom authorization attribute . say .. <code>MyCustomAuthorizationAttribute</code> .</p>
  
  <p>Since HTTP message handlers are in the first stage in the processing pipeline. Does it make any sense to put it in there ? </p>
  
  <p>Authorization for me right now simply means checking a token in the header which is given to the client after authentication.</p>