problem is, web apps can't act as clients?
petercooper: You're looking for OAuth :) http://oauth.net/ - OAuth provides you with "valet keys" (the non technical term!) so that third party apps can go into other apps for you to do just what is necessary.Twitter is looking to implement OAuth (supposedly they already have in some regard, but it's not in public use).