2011
Securing REST Web Services With OAuth
explore an example REST application that uses the open-source protocol OAuth to address security issues.
2010
Principles for Standardized REST Authentication - O'Reilly Broadcast
a set of standards that I think should be in place for any REST authentication scheme.
Here's the summary:
1. All REST API calls must take place over HTTPS with a certificate signed by a trusted CA. All clients must validate the certificate before interacting with the server.
2. All REST API calls should occur through dedicated API keys consisting of an identifying component and a shared, private secret. Systems must allow a given customer to have multiple active API keys and de-activate individual keys easily.
3. All REST queries must be authenticated by signing the query parameters sorted in lower-case, alphabetical order using the private credential as the signing token. Signing should occur before URL encoding the query string.
OpenID, One Year Later - Blog – Stack Overflow
2009
Socialize, Connect, Share and Promote using Facebook, MySpace, Twitter, Yahoo and Open ID var gaJsHost = ((
FreeMyFeed - Free Your Feed From Authentication | freemyfeed.com
google-friend-connect-plugins - Google Code
OAuth-OpenID: You’re Barking Up the Wrong Tree if you Think They’re the Same Thing
Secure Cookie Authentication for CouchDB | Jason Davies: Web Design and Development
I’ve recently been working on an implementation of cookie-based authentication for CouchDB. This is important for pure CouchDB applications (couchapps), where browsers communicate directly with CouchDB. Currently browsers can be authenticated using HTTP basic auth but the popup login box can be disruptive and confusing for users.
don't miss the picture.











