How do I protect my backend from receiving requests that do not come from the frontend?

Question

I\'m using Strapi API for my CMS/backend which has a path localhost:1337/products.

I have a Vue frontend that makes a graphql POST to the backend whenever the user ac