Detect third party site login to espo API

[bandtank]

Is it possible to detect a login attempt from a third party application? I am building a timesheet application for Espo on a separate site and I'd like to limit login to all users with 'has_timesheet=true' in their user profile. I'm not sure how to accomplish that at the moment. I'm guessing I need to do something in the auth controller, but I don't know how to detect which application is logging in (EspoCRM or my timesheet application).

Any advice would be greatly appreciated.