Find out from which url your API called

Hello,

There are multiple ways of doing this. To start with you can check the Referer Header of the incoming HttpRequest. For the AJAX request's made from your application's page the domain and context part will be same as your applications domain and conrexr. eg. If your app's base url is http://www.foo.com/someapp then Referer header of ajax requests will also start with this base url. (Please remember though that the Refere header can be spoofed)

Another way is to use a hidden variable and session variable combination. In this scheme for every request you will generate a random token, store it in session and pass it to client via hidden field. The client is then expected to send this token in subsequent request. if token send does not matches with the one stored in the session then you can discard the request.

Regards,