I need to use some API by my own mobile app. But I want lock access from 3d party mobile apps. How can I do this?
I talking not about authorization. I just don't want, that somebody write application which use API on my website.
You can't reliably block 3rd party clients without machine to machine authentication.
I suggest using an API key as a general approach. This question explains how it might be implemented at a high level
However:
What's best for you depends entirely on the framework that you're using, it's always best to use an existing framework for security.
You can't reliably block 3rd party clients without machine to machine authentication.
I suggest using an API key as a general approach. This question explains how it might be implemented at a high level
However:
What's best for you depends entirely on the framework that you're using, it's always best to use an existing framework for security.