---
title: Tokens
categories:
- work
content-tags:
- code
- auth
---

Catching up on [Atom][1] news, I learned from a [Mark Pilgrim article][2] about the UsernameToken profile for OASIS's [web services security specification][3].  Deja vu!  We've used a similar home-brewed scheme for inter-application authentication for 4 years ranging from small ASP applications to web services in large J2EE apps.

   [1]: http://www.intertwingly.net/wiki/pie/
   [2]: http://www.xml.com/pub/a/2003/12/17/dive.html
   [3]: http://www.oasis-open.org/committees/wss
