title: How do I write ajax endpoints for my vue app to grab data from database while allowing only my vue app to call them?
body: <p>When a user changes a dropdown, I need to make an ajax call to an endpoint, that grabs the data and return it as a JSON.</p>
  
  <p>I can do the event stuff with Vue, to make the request, but how do I guarantee that Vue is the requestor?</p>
  
  <p>I can't really put an API key or something in the JS as that can be viewed through source. Someone could also watch the network tab in chrome and replay the requests to retrieve the data.</p>