How to securely use Azure Speech services in SPA app

Hello, I am building a SPA app (using Angular) and I want to add a talking avatar to it. I have the microsoft demo application for the Chat avatar and this functionality is what I want to achieve, however, the demo wants you put an API key into the form so it can call the Azure Speech services.

I don't want to have my API key on the client, so I wondered if there is a better approach.

I don't know if its possible but I was hoping that I could generate a short lived token on my backend services that I could pass to the client and it could use that with the Azure Speech APIs. I know you can get a token from a managed identity, is that the way to do it? Could I generate that token on the backend and pass it to the client and have it use that against the Speech api?