Secure Azure API rest calls in javascript
It seems that we cannot hide the subscription id in the JS code. Because JS code should send http request with this key and we can get the subscription ID with Fiddler.
Alternatively approach is, we can send this http request in the server-end. We can call the server-end method use the Ajax, server-end call the Azure Management API and we can write the subscription into the server end. Using this method, others can not see the subscription ID in JS code.
we are using Azure API management which maps to python flask api. We are making the  javascript ajax calls (Azure APIs). We are now placing the subscription key directly in the query parameter of the ajax calls. 
Now anyone who have access to this key (by pressing developer tools or view source), can access the apis' as well. 
Is there a way to hide the subscription key in ajax calls?