On the frontend: Implement an authorization header to accompany each request to the backend. The authorization header will contain some form of auth token from Auth0.
On the backend: Reject any requests that don't have a valid authorization header which is counter-checked against our Auth0 user list.