We’re looking to create all our logic under the Hosted Business Logic and then a Unity client to call this logic.
Can we protect the hosted business logic so that it will only accept calls from the Unity Android or Unity iOS client? In other worlds we’d block http get method / curl.
Can we do this and how should we do this?
You should’ve noticed RunnerContext argument in your Business Logic code, and it contains a method which retrieved client device type (e.g. getDeviceType() in Java, which returns enum constant).
This method would help you identify the type of a client and, for example, return some fault to REST clients (which are “http get method / curl”).
Would it fit your needs?