I'm attempting to build up an API around a fairly simple concept: a User has many Locations. The locations have CRUD operations exposed via JSON and XML. There is no HTML view to this web service.
There is a completely separate website that will use my API via JavaScript and AJAX calls (in addition to mobile clients on smartphones) to manipulate a user's locations. I'd love to use two-legged OAuth to expose the user's locations as a Provider for authentication.
Are there any Rails plugins that would make this fairly easy (OAuth + authlogic don't seem to implement two-legged OAuth or even a Provider) or do I need to implement it myself?