I have actually a frontend (quasar) and a backend (spring-boot).
I access to backend with urls (ex : example:8080/users/all) throught axios in my front end but my problem is that anyone can access to this url and have access to all data.
I already tried to block all ip address except my frontend server ip but he use the client ip for the call even if I use ssr mode in quasar.
Is there any way to only let the front end calls api ?