Designing a Secure REST (Web) API without OAuth | Hacker News Reader