I'm now trying to implement user authentication on my android app. I, however, have a few questions.
I use a REST API. How do I safely request and send data to and from the phone? I'm assuming that I should encrypt the user's password before it's sent from the phone to the server.
Parts of my app return JSON data (from my API) that are specifically made for that user (based on their identification). After authentication, how can I request data based on the user's identification?
I have heard others mention something about a token (OAuth?). Would this token be saved both on the phone and within my server's database? Would the token then be included in each API request and verified with the server database before returning any data?
Is there anything else I should know? Links to tutorials? Security?