Is there a way to secure an API key on a frontend page?
问题 My service allow any HTML documents to be converted to PDF using a POST request. It is mostly used on the backend of my client's server and thus, the API key used for the communication is kept private. Now, I'm thinking of a way to let my client's visitors be able to call my service on behalf of my client API key, without exposing this secure API Key. My main issue here is security. If my client add an XHR POST requests that contains the API key, someone can take that API key and use it for