I was aiming more for app <-> app authentications more than app <-> user authentication, but in your case I would definitely use at least a salt for your sha1 h

I was aiming more for app <-> app authentications more than app <-> user authentication, but in your case I would definitely use at least a salt for your sha1 hashed passwords. oAuth seems to have quite a large pool of samples and classes here which I found useful; http://oauth.net/code/ http://oauth.net/code/