My .NET web application needs to allow access to a 3rd-party server for push notifications. I want to create, at a minimum, 2 REST methods. The first one will be called by the 3rd-party app every time a push notification is to be sent. My REST method will create an OAuth2 access token and return it after checking simple access information sent with the request (UserId/Password). Then, the 3rd-party app will call a REST method with the OAuth2 access token and the push data in a JSON wrapper.
My current web Startup class, Startup.Auth.cs in App_Start, uses Owin to create the OAuth2 environment. I want to be able to set different Access Token Expire times and even forcibly expire an Access Token after it has been used in the second method mentioned above.
Everything I have found in my research seems to be centered around using an access provider, such as Google or Azure. I'm sure that what I'm trying to do is simple, I just need some guidance.
Thanks in advance
