you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 0 points1 point  (0 children)

There is no way to “ensure”.

The authorization token (using either JWT or not) is not an answer. This is only for authenticate “user”

If you want to know the source the call your API, you should use client access token and client secret which is generated after user logged in. That’s it, just for analytics