How protect my token in the browser inspector on Prismic-Ref calls?

[test.johnwalker (John Walker)]

Hello everyone,

I make GraphQL calls to Prismic from my react application. If I use a private repository, it is required to add an authorization header to the request. Unfortunately, if that header is specified, an authorization token is provided in the response for the Prismic-Ref call. As a result, any customer can find an authorization token in the browser inspector. What is the purpose of providing the API token in the response?
It's a default endpoint to retrieve Prismic-Ref, e.g. GET query to https://hcmsrepo.cdn.prismic.io/api/v2

Is there any option to limit\hide part of the data I receive from that endpoint?

[Priyanka (Priyanka Maheshwari)]

Hello @test.johnwalker

Thanks for reaching out to us. We have already been discussed this question here:

How protect my token in the browser inspector?

Hello everyone, I am using a permanent access token to access my prismic-graphql api and it works but ... this access token is visible in the browser inspector when i make request. Please, how can i hide my token ? [code] [inspector]

Let me know if you have any further questions related to it.

Thanks,
Priyanka