Hacker News new | ask | show | jobs
by NicoJuicy 3072 days ago
Depends on what you want. You can just use an API key if it's for easy access, through a header.

If you want more, then use username + pass. Encrypt both or generate something from both of them. Eg. encrypt(username):encrypt(pass)

If you want more, use private & public keys, which receive a session token the first time ( when authenticating).

...

I think the end result would be a self hosted oauth server with permission management.