Rest API Request design for third party from front end

Question

This is a design question and I am not able to convince myself which path should I follow.

Below is the description:

The request flow is Reactjs applicat