Best way to validate source of API request

I am trying to develop a PHP RESTful web service. What is the best way to securely validate the source of request?

Firewall is an option but I want 开发者_JS百科to do some application level validation.

---

use mutual authentication with https.