&gt; Basic auth is insecure<p>When used over HTTPS it is about as secure as any other web auth method.<p>&gt; Force users to reauthenticate after a certain period of time.<p>With basic auth, there is no session. Authentication credentials are sent with each request.<p>&gt; Allow user to logout without closing their browser.<p>There is no session. Only authenticated requests.<p>It&#x27;s not for everyone, but I find that stateless APIs are much easier to work with.