@jeromesoriano Might help to read the docs, which explains great detail how to use Sanctum in both a web and API context.
And you’ll find you don’t store a token generated by Sanctum to protect web routes, as any token returned will be plaintext, stored in client storage (localStorage, etc) and therefore defeats the entire purpose of secure authentication.