title: Passing Foursquare token in HTTP Authentication header. Is it possible?
body: <p>I'm constructing an application with 2 sides: client (iPhone) and Server (PHP). Communication using https. The mobile phone gets a 4SQ access token. Then, it sends that token to the server, and the server will make 4SQ API calls using it. My question is about how to send this token.</p>
  
  <p>My idea was to include the token in the HTTP Authentication request's header, but after reading about basic/digest authentication, I suspect it isn't the way of doing it. Actually, the calls to 4SQ API are done using a request parameter </p>
  
  <blockquote>
    <p>oauth_token=ACCESS_TOKEN</p>
  </blockquote>
  
  <p>instead of putting the token in Authentication header, or any other place. I'm sure there's a good reason for that, but I can't find it. </p>
  
  <p>Then, which option is the best?</p>
  
  <ul>
  <li>Phone sends token to PHP server as request parameter, like 4SQ does</li>
  <li>Phone sends token to PHP server in Authentication header (which kind oh authentication is?)</li>
  <li>Any other way</li>
  </ul>
  
  <p>Many thanks in advance, and best regards</p>