ok. So then setting apiBasePath to /api/auth on front and back should work. If the refresh API call returns 401 (when not logged in), it means you have configured it correcly.