title: Basic Auth API without client storing passwords in plain text?
body: <p>I want to build an API that uses HTTP Basic Auth, but to do this I would need the client to store the user's password in plain text and then send it along with every request. I really don't want to do this. </p>
  
  <p>I can't use OAuth for this API, or have the client register their app to use the API.</p>
  
  <p>Any suggestions on alturnative methods of authorisation? </p>