title: Lumen App authentication
body: <p>I am building an App API in Lumen, and I am a bit confused about how to lock down what/who can make requests to it. </p>
  
  <p>At present I have no way of authenticating requests from the app, so anyone who knows the link could make requests from a browser and potentially cause havok. I know in the .env file there is an appkey variable which is currently empty, and after some research I can't seem to find a clear answer on what it actually does and if I need it.</p>
  
  <p>So basically:</p>
  
  <ul>
  <li><p>If request comes from my app, proceed.</p></li>
  <li><p>If it comes from anything else, stop it.</p></li>
  </ul>
  
  <p>That is what I am looking for. </p>
  
  <p>I am using Ionic $http to make the requests.
  Any help would be great</p>