REST Authentication Approache: "API keys" ?

[redben]

Hi,

I am evaluating possible scenarios to manage authentication of a few REST services. I have been reading around the Web (and the books) about this. So there is Basic http and SSL/TLS + digest.

I am wondering how one could implement authentication as "API keys" within CXF, instead of username and password ?

[davsclaus]

You mean tokens, like oauth and whatnot?

http://en.wikipedia.org/wiki/Oauth

Apache CXF supports oauth.

http://cxf.apache.org/docs/cxf-oauth-10.html

And for RS

http://cxf.apache.org/docs/jax-rs-oauth.html