---
title: "How to Design Single Page Apps with a BFF to make API calls Securely and Prevent Token Hijacking"
url: "https://gosec.tv/videos/how-to-design-single-page-apps-with-a-bff-to-make-api-calls-securely-and-prevent-token-hijacking/"
type: "video"
published: "2023-09-13T15:00:00+00:00"
modified: "2026-09-25T16:50:36+00:00"
author: "admin"
---

Paul Figura shows how a backend-for-frontend keeps stolen access tokens useless against APIs, with a live ForgeRock demo.

   To access this content, you must purchase [GoSec.TV membership – Individual](https://gosec.tv/product/gosec-tv-individual/) or [GoSec.TV membership – Team](https://gosec.tv/product/gosec-tv-team/).