In an attempt to abstract the process of accessing SharePoint data, I would like to create a Web API application that can run server-side code (think, SP objects).
What are some best practices for accomplishing this? The question here seems to discuss what should not be done but doesn't really indicate what can or should be done.
Such a Web API application would need to know the security context from SharePoint so that security trimming takes place.
Suggestions?
