Recommended way to securely connect to a GraphQL endpoint from a frontend application

I'd open a thread about a security issue when connecting to a graphql endpoint from a frontend app, due to sharing the token with the client in order to perform queries from the client itself at: https://spectrum.chat/next-js/general/recommended-way-to-connect-to-a-graphql-endpoint-using-next-js~ff2c45d6-626a-4aed-90b7-e590b5fcfa6a

I'm posting here in order to bring some attention from the GraphQL community on this, as Next.js is one of the most famous React frameworks out there and could use some good advices from experienced people. :)