I'm working on a WAAD WebApi which calls another WebApi.
I created two apps in my WAAD. I can connect from one WebApi to the other. But when I create a third app I can also get a token for the third app.
Is there a way to prevent App1 to get a token for App3 and only get a token for the App2 app.
I know there is an option to create a delegated permission for App2 and add this permission to App1 but as far as I can see this won't prevent App1 from getting a token for App3.
I know my question is a bit cryptic, but feel free to ask more details.