Secure my API connection with other websites

How would you validate that the API request is coming from a particular domain? Request headers can be modified as can query parameters. It seems like additional complexity that isn't necessary, though that is without knowing why you want to do so.


Let's say you figure that out, all you would need to do is override the _detect_api_key() function and add your additional code, so usually creating a class that extends the REST_Controller.