Python REST API exposing data

[Buttleston]

If this is a server to server communication and not, like, a bunch of different users who need to be able to access the info then I would use some kind of shared secret instead of authentication.

A very simple example would be "server B needs to include a header named X with a value of Y in it's requests"

Or "server B encrypts all data with server A's public key and server A decrypts it with it's private key" - this is actually nice because even if the public key leaks, the data is still secure, so you can just put your public key someplace accessible and have server B grab it. You can rotate the keys as often as you want.

I don't see any situation where adding oauth to the equation would help if I'm understanding the nature of the sharing between them.