title: How to secure Rest Based API?
body: <p>We intend to develop rest based api. I explored the topic but it seems, you can secure api when your client is an app (So there are many ways, public key - private key etc). What about websites / mobile website, if we are accessing rest based api in website which do not use any login for accessing contents ( login would be optional ) then how could we restrict other people from accessing rest based api ? </p>
  
  <p>Does it make sense using Oauth2.0 ? I don't have clear idea of that.</p>
  
  <p>More clear question could be ,How can we secure get or post request exposed over web for the website which doesn't use any login ?</p>
  
  <p>If it's simple get request or post request , which will return you json data on specific input, now i have mobile website , who will access those data using get request or post request to fetch data. Well, some else can also access it , problem is i am not using Login, user can access data directly. But how can we restrict other people from accessing that data.</p>