Index: frontend/src/api/axios.js
===================================================================
--- frontend/src/api/axios.js	(revision 72053b5fc3ff291757af1cdd64e8fdfcb9e9b17d)
+++ frontend/src/api/axios.js	(revision 86158850756b7b97df263e784aecbbae73d37b17)
@@ -1,6 +1,16 @@
 import axios from "axios";
 
-export default axios.create({
-  baseURL: "http://localhost:8080/api",
-  withCredentials: true, // important if using cookies
+const api = axios.create({
+  baseURL: import.meta.env.VITE_API_BASE_URL ?? "http://localhost:8080/api",
 });
+
+api.interceptors.request.use((config) => {
+  const token = localStorage.getItem("authToken");
+  if (token) {
+    config.headers = config.headers ?? {};
+    config.headers.Authorization = `Bearer ${token}`;
+  }
+  return config;
+});
+
+export default api;