public override void OnAuthorization(HttpActionContext actionContext) { if (SkipAuthorization(actionContext)) { return; } var userSessionManager = new UserSessionManager(actionContext.Request.GetOwinContext()); if (userSessionManager.ReValidateSession()) { base.OnAuthorization(actionContext); } else { actionContext.Response = actionContext.ControllerContext.Request.CreateErrorResponse( HttpStatusCode.Unauthorized, "Session token expried or not valid."); } }