Design pattern for webservice authentication

Question

Is there a best practice or design pattern on how web services should be authenticated. I am especially concerned about not having to pass the authentication data every time I hit the service.

Answer 1

I found a good link http://www.coresecuritypatterns.com/patterns.htm.