I have got UmBootstrap working as a Content Delivery API in an Azure Web App and the same page using the JSON in a static HTMX site.
However, to do so I have had to allow an origin in Azure.
How can I protect that origin so that only my static site can access the API?