title: Website API only for my android client
body: <p>I want to develop an android app for my website. One way of doing it is to have an API for the site, and let the app use that API. However i want this API to be used <strong>ONLY</strong> by my android app, I don't want any other client to be using this API. </p>
  
  <p>Is there a way to ensure this?</p>
  
  <p>I can think of one way of doing it: put a secret in the app and let the app pass this secret always to the API. But i am not sure how secure this approach would be because any packet sniffer can easily sniff the parameters and hence the secret. Any other suggestions?</p>