title: Rest API Basic Authentication
body: <p>Is it okay if the server returns the API Key and Shared Secret Key when a client tries to login on the API using Basic Authentication? For example, if a user enter this link <a href="http://api.example.com/authorize?auth=some_encoded_Base64_string" rel="nofollow">http://api.example.com/authorize?auth=some_encoded_Base64_string</a>, the response will be:</p>
  
  <pre><code>Content-Type: application/xml
  Date: Fri, 10 Nov 2006 20:04:45 GMT    
  Transfer-Encoding: chunked
  Authorization: apiKey;secretKey
  </code></pre>
  
  <p>Will I have issues using this method? I wanted to be like this since the API core methods will only accept APIKey hashes and in order to obtain that they need to use the Basic Authentication as they're first step. I'm not gonna use OAuth here for now.</p>
  
  <p>I'm trying out the new ASP.NET Web API for this project.</p>