https://shoesandroidblog.blogspot.com/2024/01/how-to-validate-origin-of-web-service.html