what is the best secured way to store authorization token?

I have an application where I get token through AAD authentication. Everytime I make an api call I have to pass that token as header. Where to store the token so that it's secured. is there any way appart from cookie / local storage / session storage ?