I have a SPA with a number of forms that hit our internal API. I have one contact form in on the website that I would like to generate a LEAD in Zoho CRM.

I am having an issue because The REST API docs required that the user is authenticated and authorised to make this request but in my instance this is a public form (with Sanitising and Validation etc) that I would like to simply submit a lead into the CRM. 

I could implement the webform but it would take a while to make the UX the same as the other forms and ideally I need to preventDefault on the action so I can keep the app from refreshing and update state on the client. Much easier with REST etc.

Am I missing something? Is it impossible to have a public form do this request (I could add a serverless function into the mix to protect tokens if necessary)

Cheers