my api calls.
                  
                  
                  e.g.
                  
                  
                  I have a chat app(which is a saas based) which requires a key or id to start.
                  
                  
                  So the initiate JS code 
                  
                  
                  Chat.init({key: '1234'})
                  
                  
                  
                  
                  
                  if anybody visits the site and copy the scripts they can initiate the chat widget on their site.
                  
                  
                  I know it is not useful for them but annoying for me as a site owner.
                  
                  
                  
                  
                  
                  So is there a way to secure such client-side calls?
                  
                  
                
no that's why you use php
Обсуждают сегодня