Hacker News new | ask | show | jobs
by lhazlewood 4818 days ago
You shouldn't ever use username/password pairs for API authentication. If the user ever changed their password, then their API calls would immediately fail!

This is one of many benefits of using multiple (revokable) API Keys.