Best way to validate source of API request

I am trying to develop a PHP RESTful web service. What is the best way to securely validate the source of request?

Firewall is an option but I want to do some application level validation.

Answer

use mutual authentication with https.