[Vuejs]-How to make sure it's my frontend making the api calls

You can add a custom element, like the csrf_field(), to all of your forms. If you have that element…then it’s coming from you.

edit: Or json web tokens, but that’s a bit more work.