Controller

gistfile1.cs

 [RoutePrefix("login")]
    public class LoginController : ApiController
    {
        private readonly ITokenProvider _tokenProvider;
        private readonly IUserRepository _userRepository;

        public LoginController(ITokenProvider tokenProvider, IUserRepository userRepository)
        {
            _tokenProvider = tokenProvider;
            _userRepository = userRepository;
        }

        [HttpPost]
        [Route("")]
        public LoginResponse Login([FromBody] LoginRequest credentials)
        {
            var loginResponse = new LoginResponse {Authenticated = false};

            if (TryLogon(credentials.Email, credentials.Password))
            {
                loginResponse.Token = _tokenProvider.GenerateToken(credentials.Email);
                loginResponse.Authenticated = true;
            }
            else
            {
                loginResponse.Authenticated = false;
            }

            return loginResponse;
        }

        private bool TryLogon(string email, string password)
        {
            IUser user = _userRepository.GetUserByEmail(email);
            return PasswordHelper.ValidatePassword(password, user.PasswordHash);
        }
    }
}