Can I use OAuth for a SOAP web service?

Question

Standard HTTP authentication for SOAP passed a password, etc. in clear text, and I'm looking for an alternative, possibly key-based, web services authentication mechanism instead of a password.

OAuth is gaining in popularity; would be appropriate, and how would I implement it? Or maybe there are other methods that I should use.

The project itself is relatively simple, and only one or two methods should be disclosed, but safety is of the utmost importance.

Answer 1

I don’t understand why not. All OAuth parameters can be displayed directly in the URL, which largely means that it can work with almost any service API. You just need to check the various bits and pieces (oauth_consumer_key, oauth_nonce, oauth_timestamp and oauth_signature) in your service controllers.