A visitor to the site would be able to see any requests the page makes to a function so I couldn’t u
A visitor to the site would be able to see any requests the page makes to a function so I couldn’t use some sort of fixed authentication header right? Maybe a dynamically generated token based off a private key would work

