Will Norris: Authentication in WordPress 2.8
Will has been working on OAuth for WordPress and along the way re-shaped the the authentication flow. This was needed to support things like XML-RPC requests authenticated only via OAuth, that have empty username/password fields.
The current OAuth for WordPress code is implemented as a plugin (and requires PHP5 at this point), which we plan to integrate into the core WordPress distribution in the future.