Mobile App: users writing to DB how to be sure they can(authentication)?
<p>I think it's important to say that I don't have any experience in the technologies nominated below, I have some idea what is going on, I've googled a lot, but still - more I google more dumb I feel. :)</p>

<p>Making an app in Ionic 2, users of this app can read/write data about themself in DB.</p>

<p>I am using Wordpress as backend,  actually users will change values in the table that was created by some Wordpress plugin.</p>

<p>First problem - I have no experience at all. <br>
Second one - I must understand which user is knocking to the server.
Because user can change only his own data in DB.</p>

<p>I've solved it by creating a script that checks GET request from app &amp; that request has a param with user nickname, so I have turned this script to template and assignined it to the page. ( template was first thing that went to my mind, if you have better idea - please tell me how to do it better! ).</p>

<p>Well now I knew who it is, but I disliked that this so unsecure!
Its only GET request with user name in it and changes to bring into DB.
NOT GOOD. 
I've thought that I should send not only nickname but also some kind of a password, so I can check if the user is actually genuine user, well, you know.</p>

<p>But knowing nothing about security, didn't know where to start so I've started googling.</p>

<p>I've find out that there is 'Basic Authentication' - disliked it because password is verry simple to decode (base64) and you must send it with every request (not safe).</p>

<p>Then I thought about crypting pass with strong algorithm like bcrypt &amp; then send it with the request. Disliked it too - because at the end you are always send a password even if strongly crypted.</p>

<p>Now I've started to look in the direction of Auth 1.0
(because saw that wordpress has a plugin for it, I know little about wp however).</p>

<p>But after all I am not so sure that I am doing things in the right way. 
I must finish many things, but I am stuck with this security issue and I don't know if it's my paranoia and there is simplier ways to accomplish what I want to do.
Don't have much time, don't want to waste time anymore.</p>

<p><strong>Please, someone who is pro in this stuff give me an advise how to do this thing in the right way!</strong> 
because I am going crazy with that stuff.</p>