title: What method of authentication should I use with the Sorcery gem using a mobile application?
body: <p>I'm trying to determine if there is a specific method of authentication one should use besides the traditional basic HTTP auth that is offered with the Sorcery gem given the fact I would want to authenticate users on a variety of mobile platforms (Android, iOS, WP7 etc.)?</p>
  
  <p>Thanks in advance.</p>
  
  <p><strong>EDIT</strong>
  What I have decided to do for the time being is as follows:</p>
  
  <ol>
  <li>Login user with Sorcery's <code>:http_basic_auth</code> to the web service</li>
  <li>If the login was successful generate a time based token and an expiration time for the token</li>
  <li>Pass the token back to the client</li>
  <li>Client (Android, iOS, WP7 etc.) passes the token to the service with each request.</li>
  <li>Web service then uses the <code>auto_login</code> Sorcery method to authenticate the user and then passes the resource back to the client</li>
  </ol>
  
  <p>Also for extra security and due to the fact it's an ecommerce site it will be running over SSL. I will eventually plan to implement some kind of OTP/OAuth method but will do that after testing. I hope this helps anyone else looking for simple Rails mobile authentication. Thanks for the help.</p>