Search code examples
authenticationoauthbasic-authenticationdigest-authentication

HTTP basic auth, digest auth and Oauth?

Which one of basic auth, digest auth and Oauth should one use for a web application to let users access resources through Restful API calls?

Isn't Oauth the better solution replacing basic and digest auth?

Solution

  • I am trying to work out the answer to this one as well. I would say it depends on what the scope of your intended app is. oAUTH restricts access to developers who would have to build a client to do the handshaking.

    Basic can work with many data browser clients like Sesame and also work with Excel 2010, as well as any old browser. the only issue is the passwords travelling in the clear, which can be mitigated by hosting your app over https.

    Don't know much about digest unfortunately.

    I am personally trying to test an implementation of each: http basic and oauth.