Restrict API Access to Web Clients Only #9
Description
🛡️ Issue: Restrict API Access to Official Clients
Description:
Investigate and implement a strategy to limit backend access exclusively to the official app frontend. This is to prevent usage from non-browser or unauthorized clients.
Tasks:
- Assess feasibility of restricting backend API access to verified frontend requests.
- If possible, implement access control and ensure app compatibility.
Nice to have:
- Create a secured way of providing access to backend via service accounts or API tokens that enable programmatic use