title: With next.js, how can I restrict requests to API routes to only come from the web page?
body: <p>I have API routes that I want to restrict to only allow from the web (react) application. Can this be achieved?</p>