This is what will be landed on AGSec
https://github.com/hueniverse/hawk
Of course, if we don't like it we can improve and change as needed.
Kris Borchers wrote:
Right … even on the iOS and Android side of things, it is still very
easy to "decrypt" a base64 encoded string. Using HTTPS would help but that is
not foolproof either so we may want to think of some other method.
--
abstractj