title: How do I restrict API access to only my application?
body: <p>I've created an api and implemented JWT for certain actions. I followed a few tutorials and have successfully prevented unauthorized requests to non-GET endpoints. Each of the tutorials seems to cover the same concept though: Making requests for a User. That is, I'm getting their username/password, requesting a token, validating that token, then performing the actions.</p>
  
  <p>The issue is that I don't want the public to be able to make <code>GET</code> requests to the api. I also don't want them to be logging into the application since it's not necessary.</p>
  
  <p>I'll probably be using some ajax on the site as well, I'm not sure if that complicates things.</p>
  
  <p>Am I supposed to just make each request using an "application" username/password? Or is there a standard way to limit api requests to an application?</p>