Secure Azure API rest calls in javascript
You can use JSON Web Token (JWT) in the request, which has a signature and expiration time.
we are using Azure API management which maps to python flask api. We are making the  javascript ajax calls (Azure APIs). We are now placing the subscription key directly in the query parameter of the ajax calls. 
Now anyone who have access to this key (by pressing developer tools or view source), can access the apis' as well. 
Is there a way to hide the subscription key in ajax calls?