Currently I have a react frontend that authenticates users using msal.js (Azure AD B2C). The backend API is built with .NET Core and currently accessible to anyone.
I would like to secure the API so that only a user authenticated on the frontend can access the API.
Is there any documentation/sample apps on how to achieve this?