Maybe proxy your Foursquare API requests via https://www.eliotand.me/airbnb-poster/search or a similar API endpoint you'd create. Disallow CORS on that new API endpoint. You can keep the API call signature but remove the client ID and secret.
On your backend you can then make those Foursquare API requests and add the client ID and secret to the request.
Maybe proxy your Foursquare API requests via https://www.eliotand.me/airbnb-poster/search or a similar API endpoint you'd create. Disallow CORS on that new API endpoint. You can keep the API call signature but remove the client ID and secret.
On your backend you can then make those Foursquare API requests and add the client ID and secret to the request.