Protecting/limiting my API endpoints to server side use
<p>I am new to Node and web development. I am working on a simple application to get started and want to limit the use of my endpoints to server side calls, i.e. anyone else trying to access them gets a 403. </p>

<p>However, after researching, I found PassportJS with examples of how to protect endpoints, but they all seem to be overkill especially for a small application like mine.</p>

<p>Am I overthinking this, or should I be looking for a more basic solution?</p>