title: Is two-legged oAuth the right answer for a simple API?
body: <p>I'm writing an API where partners will ingest my content. There is no user data to speak of, and it's all-or-nothing access. I'd eventually like to be able to restrict some partners to certain elements of the site, but that's down the road.</p>
  
  <p>Does a two-legged oAuth fit my needs well, or should I just provide an API key and a secret key to use in signing the requests? I feel like oAuth might be overkill.</p>
  
  <p>Thanks!</p>