参考博客http://www.cnblogs.com/yuefei/p/4250027.html
webapi自带了一套身份验证，使用方法为：
1、webapi地址/api/Account/Register用这个api注册用户，系统会在app_data下面生成一个数据库，注意注册用户的时候，密码需要一个非字母非数字的字符
2、注册用户后，就可以用webapi地址/token来获取一个token token有有效时间啥的
3、把token放在http请求头里面，调用webapi方法，注意请求头里面token前要加Bearer
4、请求代码大致为
private string PostWebRequest(string postUrl, string paramData, Encoding dataEncode) { string ret = string.Empty; try { byte[] byteArray = dataEncode.GetBytes(paramData); //转化 HttpWebRequest webReq = (HttpWebRequest)WebRequest.Create(new Uri(postUrl)); webReq.Headers.Add(HttpRequestHeader.Authorization, "Bearer "+ "GVk-CYQvH66OW0wAtnacJadCWJeu9zE-lx7ENk5AgfMQ0V8R35m23ycI2xZMG3UnhGOSkbhyzu7zGlyusHY9IG5A7hyveEBFZt7jfi4JwM1RebbGm9LLzAWBcjdd5u6yKYFWaqirkLV7cU_239Pj37JfY1v0AXjjXEW51oydhKFfJ2S5d3_tYB6XHrciyJvOYvbpUYBCeGYPYbm96G3nOx3-iMVRjNmAhHsaxoCkY2POR3GDhuWnauxcsO2uonYqT-j3BOphykkIc9gkUhgGhqLrdkUp0DuB9y1_3YRAdjzUuNB8SySHeJ29vu3Rl5peQXrGUJH81FICjjmysZ3WOPcjPcPj2-KWxUUIyp1DFDTEVltRK6gRwVRKHyluYrNaHs7SeD6xZQcNp895JnlFtM-Z7aESDlgGwaF99CWiXO0dzHCU7RvQTYjZP6ua8HR75MsFSCKMDlL1eBPlo9gZJzeq2G8bLGQqPiRkN4l1Sxw"); webReq.Method = "POST"; //webReq.ContentType = "application/x-www-form-urlencoded"; webReq.ContentType = "application/json"; webReq.ContentLength = byteArray.Length; Stream newStream = webReq.GetRequestStream(); newStream.Write(byteArray, 0, byteArray.Length);//写入参数 newStream.Close(); HttpWebResponse response = (HttpWebResponse)webReq.GetResponse(); StreamReader sr = new StreamReader(response.GetResponseStream(), Encoding.UTF8); ret = sr.ReadToEnd(); sr.Close(); response.Close(); newStream.Close(); } catch (Exception ex) { MessageBox.Show(ex.Message); } return ret; }