CI and Phil Strugeons REST API

[eluser]bugboy[/eluser]
I've been looking at this library for a while now and think its great.

I have a few questions regarding this and the other library restclient.

Rest Server
Rest Client


On Phil's presentation slide slide from Igniting your web service - EECI2009

It was mentioned using the api you create to power your own web app and allow other people to access the data using the api.
I can see the real benefits of this as it means you build your web app once using the same api as your users.

If i have one api for my web app and users i would like it to be secure so i use digest as indicated.
Does this mean that my web app which is on the same server has to have a username and password like a user to use the rest server?

I was thinking that if the same server(the actual web app) asks for the api then no auth is needed as its calling itself in effect and if a user on another server a auth is needed as its outside the web apps server?

Does the libraries already take this into account?
If not what would be the best suggestion for this?

Instead of using the config:

Code:

/*
|--------------------------------------------------------------------------
| REST Login usernames
|--------------------------------------------------------------------------
|
| Array of usernames and passwords for login
|
|    array('admin' => '1234')
|
*/
$config['rest_valid_logins'] = array('admin' => '1234');

I'm thinking of using a database to store the users details so that would mean that web app itself would require a user entry?


Does this make sense?

Cheers