Secure Deployment of Relay Server

[kxngHunter]

Currently, if I deploy my relay server, it would be publicly available to anyone with the URL. How can I securely deploy it instead of running it locally? Thanks in advance!

[chady]

I have my relay running on a subdomain of my app.
In my app I set a domain-wide encrypted cookie that includes a session token, the relay reads that cookie, decrypts the token, then validates it with my backend server.