adding auth warning and update doc

Author: shprink

README.md

@@ -7,32 +7,34 @@ AngularJS services to consume [WP-API v2](http://v2.wp-api.org/)
 
 <http://shprink.github.io/wp-api-angularjs/>
 
-## oAuth1
+## Authentication
 
-<http://v2.wp-api.org/guide/authentication/>
+This library only supports basic auth. OAuth1 not being suitable for JS clients (it would mean exposing key and password out of the open)
 
-### Install OAuth1 plugin
+### Basic auth
 
-Export <https://github.com/WP-API/OAuth1> zip and upload it into your WP instance.
+Basic auth is only secured to use if used during the app run time and used with a secured connection to your Blog (via SSL).
 
-### Install WP-CLI
+#### During run time
+
+Make sure your WP-API runs with an SSL certificate (https) otherwise this will expose your credentials at every request.
+
+Display a form for users to connect and use the following code to register credentials:
 
 ```
-curl -O https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar
-chmod +x wp-cli.phar
-sudo mv wp-cli.phar /usr/local/bin/wp
+.controller(function(WpApi){
+    WpApi.setBasicCredentials(<login>, <password>);
+});
 ```
 
-More info: <http://wp-cli.org/>
+#### During configuration
 
-### Create a consumer:
+You can also set basic credentials during the configuration but use this should only be used for testing as it embed credentials in the application code.
 
 ```
-$ wp oauth1 add
-
-ID: 4
-Key: sDc51JgH2mFu
-Secret: LnUdIsyhPFnURkatekRIAUfYV7nmP4iF3AVxkS5PRHPXxgOW
+.config(function(WpApiProvider){
+    WpApiProvider.setBasicCredentials(<login>, <password>);
+});
 ```
 
 ## Contribute

config.dist.json

@@ -1,17 +1,8 @@
 {
     "baseUrl": "http://sandbox.YourDomain.com/wp-json",
-    "authType": "basic",
-    "oauth1": {
-        "request": "http://sandbox.YourDomain.com/oauth1/request",
-        "authorize": "http://sandbox.YourDomain.com/oauth1/authorize",
-        "access": "http://sandbox.YourDomain.com/oauth1/access",
-        "Key": "yourKey",
-        "callback": "http://sandbox.YourDomain.com/whatever",
-        "Secret": "yourSecret"
-    },
     "basic": {
-        "login": "login",
-        "password": "password"
+        "login": null,
+        "password": null
     },
     "postsMethods": {
         "getList": [{

dist/wp-api-angularjs.js

@@ -91,7 +91,7 @@ NG_DOCS={
       "type": "service",
       "moduleName": "wp-api-angularjs",
       "shortDescription": "wp-api-angularjs service",
-      "keywords": "api base function getbaseurl getdefaulthttpproperties http inejct properties public request service url webserver wp-api-angularjs wpapi"
+      "keywords": "api base basic certificate code connect credentials display expose form function getbaseurl getdefaulthttpproperties http inejct login password properties public register request runs runtime service set setbasiccredentials ssl url users webserver wp-api wp-api-angularjs wpapi"
     },
     {
       "section": "api",
@@ -100,7 +100,7 @@ NG_DOCS={
       "type": "service",
       "moduleName": "wp-api-angularjs",
       "shortDescription": "wp-api-angularjs provider",
-      "keywords": "api base function newbaseurl provider public service set setbaseurl url webserver webservice wp-api-angularjs wpapiprovider"
+      "keywords": "addinterceptor allow angularjs api base basic configuration credential credentials defaults definition errors exposes form func function http https input interceptor interceptors lib login modify needed newbaseurl open org overwrite password properties provider public recommended requests response responses return service set setbaseurl setbasiccredentials setdefaulthttpproperties setting-http-headers timeout url user webserver webservice wp-api-angularjs wpapi wpapiprovider"
     }
   ],
   "apis": {