On the UI, please store the token in session storage or cookies, and then pass the token value through the header to every API. The backend API will retrieve the token from the header and validate it.