I also add that authentification works on the /graphql playground (by adding headers manually).
And as well, if I enter manually the token in the ApolloClient, it works.
Previously I was using the CMS Keystone 6, and the login operation was enough to make authenticated queries and mutations. I don’t understand why with Strapi I can’t do that so far.