About API security

Hello ,

I have a project that works only with the API. Now I’m doing user login operations. With API, user login works perfectly. but how do I get the page security in the best way after login? I can’t use Wappler security extension because I don’t have a database connection.

I want to use server-side sessionID, but I cannot forward it to the views inside the SPA. only client-side sessions are running. For the best security, do you direct me or share your suggestions.