Level 1
It depends on how you check for JWT tokens on the API level.
You can append it on cookie via request header, or if you use some JS-based framework on the client-side, you can handle local store logic and append the token via custom Bearer header or part of the request endpoint string.
You should explore more, JWT is well known on the internet, you will find your answer hopefully.
1 like