Hi @pandeysumit832,
You can use the context object in rules to see what application or connection the request is coming from.
For example, a rule that bans access to a specific application:
function (user, context, callback) {
if (context.clientID === "BANNED_CLIENT_ID") {
return callback(new UnauthorizedError('Access to this application has been temporarily revoked'));
}
callback(null, user, context);
}