$ 0 0 Brock has added a really nice implementation of CORS to Thinktecture.IdentityModel (both 4.0 and 4.5). Here are all the details. Filed under: IdentityModel, WebAPI