I am writing a REST API where some resources are only available to specific users. What is the generally accepted mechanism for this? Amazon appears to use the Authorization header. Twitter uses Basic Auth, i believe.
what are the benefits and drawbacks?