I am developing an SDK for the application I am working on. But only authorised apps should be able to integrate with this SDK.
Most of the SDKs use a secret API key, which when revealed gives you access to the SDK's functionality.
I would like to detect if the application has registered with me on some console. So, when the application initialises my SDK, I would check some signing or something similar to detect if this is the very application that is registered with me on my console.
Is there any way to get this signing information or something similar to detect what application is integrating with my SDK?