Securing web application with Reactjs as frontend and Java Spring as backend

Question

I am working on an application with Reactjs/typescript as frontend and services are written in java spring (written by other developer). This application stores users person