Making an appliction so it is the only application that can connect to my WebAPI

Question

How is it possible to create an Application to interact with my WebAPI . The app will send some info to my website( WebAPI ) , and then I will update my database with this info, but the problem is how to secure it, so only my app that can interact with my website?

the application designed to be deployed to many computers. and the users can use the application anonymously. for an example the lightshot app

Answer 1

You can't limit access to a web site (or any IP port) to just one app.

Validate requests on server and possibly only allow access for authenticated users - that should be enough for most cases (except payed games).

You can make it harder to replay/re-create communication protocol:

• require client certificate for HTTPS to connect
• frequently change code for client and protocol itself
• only allow authenticated users
• rate-limit requests from same user to make it harder to revere engineer the protocol...