I'm currently managing an asp.net website that heavily relies on client javascript for making ajax calls to the server. I need assistance in finding a solution to prevent unauthorized access from a Google Chrome extension attempting to make calls to my ajax endpoints. Is there a way to differentiate between calls made by my own javascript code and those initiated by the chrome extension? I've tried monitoring referer and using httponly cookies, but haven't observed any noticeable distinctions between the two types of calls. Any suggestions or insights would be greatly valued.