Moving routes from api.php to web.php was special for using csrf checking.

At first I make sanctum csrf cookie GET call and take returned cookie value in header (this is done by axios) and send to backend.