Securing chrome extension google calendar API calls to website

Question

I\'ve built a flask website that utilizes google calendar\'s api to read and write on user\'s calendar. I\'ve built a chrome extension too where users can write & read on hi