Locking API calls from frontend and hide api url and key

What is the name of the domain?

api

What is the issue you’re encountering

My frontend calls an API on render for a calculation base on user input, and writes the form on a supabase database. At the moment the API in render is exposed publicly, while the supabase insert happens via edge function, but API key is exposed in the JS browser. How I do hide the two apis call? Should I use worker? What is Zero Trust functionality?

Was the site working with SSL prior to adding it to Cloudflare?

No

What is the current SSL/TLS setting?

Flexible

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.