sp-dev-fx-webparts/samples/aad-api-spo-cookie/api/pnp.api.contosoorders/App_Start/WebApiConfig.cs

using System.Web.Http;

namespace pnp.api.contosoorders {
    public static class WebApiConfig {
        public static void Register(HttpConfiguration config) {
            // Web API configuration and services

            // Web API routes
            config.MapHttpAttributeRoutes();

            config.EnableCors();
            config.Filters.Add(new AuthorizeAttribute());

            config.Routes.MapHttpRoute(
                name: "DefaultApi",
                routeTemplate: "api/{controller}/{id}",
                defaults: new { id = RouteParameter.Optional }
            );
        }
    }
}