Accept requests only from authorised URLs

I'm making a web app that will reseive requests from other websites where my button was installed. But they will pass only if website URL was authorised.

How can I check from wich URL request came from?