title: Securing web-API access
body: <p>I have a simple web-API accessible over HTTP with some corresponding mobile apps reading that data. Now someone decompiled an app / sniffed the HTTP traffic, got the url to my web API and built his own client acting like one of mine.</p>
  
  <p>How can I secure the access to my API only for my own clients? Even with the thought of someone decompiling my app.</p>
  
  <p>Server &amp; client-side code change is an option!</p>