I own a REST API at server side and a distinct web application that would call those APIs.
I want to secure my APIs calls.
After some reading, I want to implement the OAuth 1.0a mechanism at server side. Indeed, dealing with temporary tokens, nonces etc.. is by far more secure than a traditional HTTP basic solution that depend strongly on the SSL encryption.
However, in most of examples I found on the web, OAuth seems to be by essence a means to access some data from a resource owner (like Facebook, Twitter etc...) without the need for the user to transmit its corresponding credentials to my own app.
My question is: Does it make sense to implement OAuth if my actors are just my own web application and my own set of API's at server side, (meaning no external data provided by a 3rd party are involved)? Indeed, I really want to benefit of its algorithm.