How to stop Malicious POST requests

I have a django rest backend and a vueapp client, I’m sending POST requests from the client side to django database, how can I limit users so they cant send the request unless they are on my website?
So far I’ve found out about csrf tokens but not sure how to implement it here. Is there a way to solve this?