I'm developing REST APIs and would like to know if Basic Authentication will be enough to secure them, or if I should be looking into other authentication methods, like OAuth2. My APIs are setup to only be accessed by a limited audience - all trusted external clients. I do not store or maintain user data, so I don't think the "resource owner" concept of OAuth2 applies in my scenario. An example of a service I'll be providing is an SMS gateway - basically my clients will be calling it if they want to send outgoing SMS messages for whatever reason.

Would Basic Authentication suffice for my scenario?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.