-2

I need to use some API by my own mobile app. But I want lock access from 3d party mobile apps. How can I do this?

I talking not about authorization. I just don't want, that somebody write application which use API on my website.

Roman Shamritskiy
  • 753
  • 10
  • 12

1 Answers1

2

You can't reliably block 3rd party clients without machine to machine authentication.

I suggest using an API key as a general approach. This question explains how it might be implemented at a high level

However:

What's best for you depends entirely on the framework that you're using, it's always best to use an existing framework for security.

Community
  • 1
  • 1
actual_kangaroo
  • 5,971
  • 2
  • 31
  • 45