I have a API in .NET that will fetch user details. When I make a request from my angular app, I can clearly see my token key in the devtools.
I am worried that when my site goes live people can see my token and make a request from their site. Please tell me what is going on and how I can prevent the security error.