We are using reactJS as frontend for magento 2 website using magento 2 rest APIs. But the authorization token is visible in the browser dev tools posing security risk.
Kindly suggest a way to hide authorization token from browser.
Also we want to block API hits from any other tool (e.g. postman,arc etc.) and allow API hits only through reactJS end.