Thanks for the symmetric key idea. Yah, I don't like the idea of storing a user's credentials for a 3rd party service. Unfortunately the 3rd party requires http

Thanks for the symmetric key idea. Yah, I don't like the idea of storing a user's credentials for a 3rd party service. Unfortunately the 3rd party requires http auth to access their api, and the app I'm working on interfaces with an individual's account. I wish the service had something like Flickr does for their API. The user could allow my app access 1 time, and it could work seemlessly without having to throw u/p back and forth.