Short Version: I need to pass and verify the OWIN bearing token as a query parameter rather than in the request header.
How do I then get the method to authorized ba
I wrote about how that works here: http://leastprivilege.com/2013/10/31/retrieving-bearer-tokens-from-alternative-locations-in-katanaowin/