Prevent app from loading publically but open only as iframe from specific domain

Question

I have an application build in React. And I have deployed the app using Apache and the domain is domain1.com. I have another application running at domain2.com.

I wan