如何在单页面应用程序和服务器之间保护REST api？

I have 2 servers in place, one is responsible for the front-end application and the user authentication. This server is rendering a single page application coded in javascript. This javascript app is rendering data from a second server through a REST api hosted on this second server.I have 2 servers in place, one is responsible f