title: Backend APIs can only be called from frontend and secure APIs
body: <p>I have react frontend and backend on flask. But the backend APIs are also getting called from Postman. So I used methodology of API keys. But these API keys are getting exposed, when we inspect elements in browser. So what can be a effective way to secure all my backend APIs and are not accessible except my frontend app. Thanks in advance</p>