We are using reactJS as frontend for magento 2 website using magento 2 rest APIs. But the authorization token is visible in the browser dev tools posing security risk.

enter image description here

Kindly suggest a way to hide authorization token from browser.

Also we want to block API hits from any other tool (e.g. postman,arc etc.) and allow API hits only through reactJS end.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.