How to make it so that access to the backend api is denied?

Question

Node.js

Please tell me, I have a website with a node js backend, when I send a request from the front using axios, this request is visible in the network tab, and the api address is also visible, so is it possible to make an unnecessary person not be able to send requests on back?

Answer 1

Of course you can, you need to disable the backend. Then there will be no access.

Answer 2

No. Impossible.
You can only smear everything with CORS so that it cannot be called from other sites, and deliberately confuse the API so that other people do not understand what needs to be requested and with what parameters.
Well, add authorization so that only authorized users can send requests.

Answer 3

try graphql, it's more confusing))
to access the api, they issue a token when authorizing by login \ password + CORS + rate limit
, the task of hiding the api is not clear ...