Secure API Authentication using HMAC

HMAC

• hmacarticle (PDF) – original source
• Signing and Authenticating REST Requests
• Authenticating Requests (AWS Signature Version 4)
• Universal way to authenticate clients and secure a RESTful api
• Securing REST API without reinventing the wheel
• PHP HMAC Restful API that uses Phalcon Micro framework
• Phalcon – What is the best way to design an authentication using RESTful concepts?

Hashing passwords

• How to securely hash passwords?
• http://php.net/manual/en/function.openssl-seal.php
• http://php.net/manual/en/function.openssl-public-encrypt.php
• http://php.net/manual/en/function.hash-hmac.php

Storing passwords in a DB

• Best way to store password in database [closed]