One way to do this is to have the clients pass the authentication information in the headers with every request.