How to secure seperate servers acting as authentication and frontend?

Question

Server A is an express server connected to a database. It should only be accessed by users using the interface provided by Server B. If possible, it should