Often times APIs are secured with a unique APIKEY for each application. The requirement of these APIs is you send your APIKEY with every request either through the query string or in a custom header. But when your application is a single page application (SPA) you cannot embed your APIKEY into your application because it is not a secure way to …