What are the best practice for implementing authentication for REST apis?
Using BASIC auth + SSL or something like http://tools.ietf.org/html/draft-hammer-http-token
You could have a look here, IdentityModel has Web API support:
http://thinktecture.github.com/Thinktecture.IdentityModel.45/