验证对API的访问权限

Question

I'm trying to make my First API, I never did and API before. I did read a couple of documentations but couldn't find something simple enough to describe the authentication process.

How do I authenticate a user through an API? like how can I give app developers a way so that they make a login form that grants their users access to their info on my database, and for me to provide data based on the user logged in.

I'm confused with the idea of authenticating users through an API, how can they send they passwords securely?

Answer 1

Perhaps you should take a look to oauth, that's the way twitter works, for example.