views:

48

answers:

0

I am writing a REST API where some resources are only available to specific users. What is the generally accepted mechanism for this? Amazon appears to use the Authorization header. Twitter uses Basic Auth, i believe.

what are the benefits and drawbacks?