I am developing and Android app to view the posts on my blog. I am using XML-RPC API of Wordpress. It requires a user name and password for even reading posts.
I don't find it secure to put an admin/editor password into the code. But, if I use the credentials of a user of other roles, it can't read the whole list.
What is the secure way of making a read-only app for Wordpress?