- any person (even without registering) shold be able to access the webservices but only via my web client.
- other web clients should not be able to achieve a meaningful interaction with the webservices
What could I do to achieve this? At least to some extend? Is this even possible?