ASPNet Identity Authentication MVC5 Client web site->Auth Server-> Web API server

I have resolve this issue as follows, but I'm not sure this is the effective method

1. Once log-in and retrieve the bearer token (this token should assigned with claims identity already such as username, role .. etc)

2. In the web api AccountController, need to create a method to retrieve the default claims which requires for client web application. Please check the follows

   [Authorize]
   [HostAuthentication(DefaultAuthenticationTypes.ExternalBearer)]
   [Route("UserInfo")]
   public UserInfoViewModel GetUserInfo()
   {
       var firstname = ((ClaimsIdentity)User.Identity).Claims.Where(c => c.Type.Equals("FirstName")).SingleOrDefault();
       var lastname = ((ClaimsIdentity)User.Identity).Claims.Where(c => c.Type.Equals("LastName")).SingleOrDefault(); 
   
       var IsApproved = ((ClaimsIdentity)User.Identity).Claims.Where(c => c.Type.Equals("IsApproved")).SingleOrDefault();
   
       var userinfo = new UserInfoViewModel
       {
           UserName = User.Identity.GetUserName(),
           FirstName = firstname.Value.ToString(),
           LastName = lastname.Value.ToString(),
           UserApproved = Convert.ToBoolean(IsApproved.Value.ToString()),
           HasRegistered = externalLogin == null,
           LoginProvider = externalLogin != null ? externalLogin.LoginProvider : null
       };
   
       return userinfo;
   }
   

3. From the client, this actin will be called through the token as a header.

4. Once we have got the information (is in Json string format) needs to serialize with the UserInfoViewModel class (user defined viewmodel is based on the info we require and send from webapi account) with javascript serializer

5. Using these viewmodel information, assign them to local storage and using (cookies for my case) as a identity at local

6. keep logout webapi too when ever you logs out from web app.

Please let me know if you need more info or code