I have a Restful web service API, that is being used by different 3rd parties. Part of that API is restricted (you need username/password to access it). I was wondering what wou
Amazon web services does it well, check out there methodology for some ideas. Essentially they get clients to encrypt a special http header using their password.