We built a message filtering extension with an api on server side. I'm wondering how to confirm the api request is from the extension directly (to protect the request is not an illegal request)?
deferQueryRequestToNetwork() is not available to contain any authorization information.