Some tips when writing an API in Ruby on Rails (blog.jalada.co.uk)

Out of interest, what's the standard "Railsy" way to secure an API? I know that Devise comes with support for PSKs and basic auth, so is that pretty much what everyone does as a first step?