How can I ensure an HTTP request to backend is from the same frontend origin?

Question

A frontend React component uses Javascript Fetch API to make a request to the backend API built on PHP. The frontend cannot use secret keys since they would be exposed in the bu