If you don't need delegation, there are a number of simple but secure methods: HTTPS + token via Basic auth seems quite popular. What simple but secure methods

If you don't need delegation, there are a number of simple but secure methods: HTTPS + token via Basic auth seems quite popular. What simple but secure methods are there where delegation is required? Is there something simpler than OAuth or AWS style signed HMAC?