Android authentication

The best way to authenticate an app with the REST API would be to use OAuth. There’s a good section on OAuth Authentication the REST API documentation site. You will need to install the OAuth1 plugin on your site as well.

There are some gotchas with implementing the OAuth plugin on WordPress. I found this article on CSS Tricks captured some of the complexity of setting it up.

You’ll need an OAuth library in your Android application as well, I’ve seen ScribeJava recommended more than once. In fact, here’s a StackOverflow answer with a good implementation example.

If your app is just in testing mode, you could use Basic Authentication instead of OAuth, because it’s easier to implement, but it’s not recommended for production use because it’s less secure.