Hi everyone,
We've just announced that on December 13th we'll be switching to a new authentication system for all 37signals applications: http://37signals.com/accounts
This also means that we'll be standardizing all API access to work with 37signals Accounts. We'll use a token system for all applications, similar to how we're doing it today for Backpack and Highrise.
All users will be asked to pick a new username and password and will be assigned a new API token. Once they've jumped over, they will no longer be able to access the API with their old username and password.
This is especially important for Basecamp since it didn't have an API token before. If you're developing for Basecamp, please have a look at http://developer.37signals.com/highrise/ for a preview of how the new authentication scheme will work. It basically just means using the API key as the username and nothing (or X) as the password.
Backpack and Highrise will have no changes and the old API keys will continue to work. So it should be smooth sailing.
On the same note, the HTML around account administration will change. So if you've been dipping in behind the official APIs for account and user management, these things may well break. This is especially important for Campfire which had no official API until this week's beta release.
--
David Heinemeier Hansson
37signals, Partner