Consuming web services through the browsers is a pretty standard practice most of the platforms now use some sort of REST APIs.
Security Considerations
Depending on the complexity and criticality of the application you would want to consider implementing a security framework. Check out oAuth2, open-id-connect & https
https://restfulapi.net/security-essentials/
Hosting Infrastructure
Both AWS and Azure provide framework for authentication and authorisation frameworks
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-integrate-with-cognito.html
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn
You could also consider one of a third part services such as
https://developer.okta.com/blog/2019/09/04/securing-rest-apis
Finally most hosting services will also recommend you to implement https.
BR