I consume laravel API in my android app. On login API generate JWT token and I save that token into shared preferences and use it on every end point hit. JWT has expiry too