How to implement controlled API access from a JS & HTML application?

Question

API

To begin with, there is an API with authorization checks, tokens and other parsley.
There is also a desktop and mobile application written on cross-platform frameworks like PhoneGap, these applications interact with our API (https). The problem is that such applications are very easy to tear apart and look at the logic of working with the API. How to make sure that only our applications can work with our API?

Answer 1

No way. You can try to enter something like RSA with keys for the application, and exchange some kind of signature in the headers, etc. As for "tearing" - any sniffer will show you how to communicate with a third-party apishka.