How to organize authorization in rest services for an application (AD) and related systems?

Question

Active Directory

Good afternoon!
There is a front on React and a back with rest api on java, all this is spinning on glassfish. Rest services are used not only by the front, but also by adjacent systems.
Question: how best to organize authorization in rest services so that 2 conditions are met:
1. User access through the front must be through AD.
2. Methods for the front and adjacent systems must be the same.