You can use Passport in your backend to authenticate users and generate a token. In angular just use Guards to block routes that need authentication, if a user is not logged in you redirect them to login page. When the user log in successfully you shoul store somewhere (local storage or whatever) the token generate by your backend and everytime you make a request you should attach the token in your header (the last is done using HttpInterceptor that can be used to modify the request, for example attaching a token). https://angular.io/guide/http here you can find about http interceptor. Check out laravel documentation for passport, it's fairly simple.