diff --git a/TaxBaik.Web/Program.cs b/TaxBaik.Web/Program.cs
index 64c20cc..9fe1141 100644
--- a/TaxBaik.Web/Program.cs
+++ b/TaxBaik.Web/Program.cs
@@ -246,32 +246,27 @@ builder.Services.AddHttpClient<IAnnouncementBrowserClient, AnnouncementBrowserCl
 builder.Services.AddHttpClient<ITaxProfileBrowserClient, TaxProfileBrowserClient>(client =>
 {
     client.BaseAddress = new Uri(apiBaseUrl);
-})
-    .AddHttpMessageHandler<TokenRefreshHandler>();
+});
 
 builder.Services.AddHttpClient<ITaxFilingScheduleBrowserClient, TaxFilingScheduleBrowserClient>(client =>
 {
     client.BaseAddress = new Uri(apiBaseUrl);
-})
-    .AddHttpMessageHandler<TokenRefreshHandler>();
+});
 
 builder.Services.AddHttpClient<IConsultingActivityBrowserClient, ConsultingActivityBrowserClient>(client =>
 {
     client.BaseAddress = new Uri(apiBaseUrl);
-})
-    .AddHttpMessageHandler<TokenRefreshHandler>();
+});
 
 builder.Services.AddHttpClient<IContractBrowserClient, ContractBrowserClient>(client =>
 {
     client.BaseAddress = new Uri(apiBaseUrl);
-})
-    .AddHttpMessageHandler<TokenRefreshHandler>();
+});
 
 builder.Services.AddHttpClient<IRevenueTrackingBrowserClient, RevenueTrackingBrowserClient>(client =>
 {
     client.BaseAddress = new Uri(apiBaseUrl);
-})
-    .AddHttpMessageHandler<TokenRefreshHandler>();
+});
 
 // UI & 캐시 (MudBlazor Theme Customization)
 builder.Services.AddMudServices(config =>
diff --git a/TaxBaik.Web/Services/AdminClients/IConsultingActivityBrowserClient.cs b/TaxBaik.Web/Services/AdminClients/IConsultingActivityBrowserClient.cs
index 5096236..503d53b 100644
--- a/TaxBaik.Web/Services/AdminClients/IConsultingActivityBrowserClient.cs
+++ b/TaxBaik.Web/Services/AdminClients/IConsultingActivityBrowserClient.cs
@@ -14,15 +14,24 @@ public interface IConsultingActivityBrowserClient
     Task DeleteAsync(int id, CancellationToken ct = default);
 }
 
-public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<ConsultingActivityBrowserClient> logger)
+public class ConsultingActivityBrowserClient(HttpClient httpClient, ITokenStore tokenStore, ILogger<ConsultingActivityBrowserClient> logger)
     : IConsultingActivityBrowserClient
 {
     private const string BaseUrl = "/api/consultingactivity";
 
+    private void EnsureAuthHeader()
+    {
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+            httpClient.DefaultRequestHeaders.Authorization = new("Bearer", tokenStore.AccessToken);
+        else
+            httpClient.DefaultRequestHeaders.Authorization = null;
+    }
+
     public async Task<List<ConsultingActivity>> GetAllAsync(CancellationToken ct = default)
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<ConsultingActivity>>($"{BaseUrl}", ct) ?? [];
         }
         catch (Exception ex)
@@ -36,6 +45,7 @@ public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<Cons
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<ConsultingActivity>>($"{BaseUrl}/client/{clientId}", ct) ?? [];
         }
         catch (Exception ex)
@@ -49,6 +59,7 @@ public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<Cons
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/pending-followups", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<ConsultingActivity>>(data.GetRawText()) ?? [];
@@ -66,6 +77,7 @@ public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<Cons
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { clientId, activityType, activityDate, description, consultantId, nextFollowupDate };
             var response = await httpClient.PostAsJsonAsync(BaseUrl, request, ct);
             response.EnsureSuccessStatusCode();
@@ -83,6 +95,7 @@ public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<Cons
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { outcome, nextFollowupDate };
             var response = await httpClient.PutAsJsonAsync($"{BaseUrl}/{id}", request, ct);
             response.EnsureSuccessStatusCode();
@@ -97,6 +110,7 @@ public class ConsultingActivityBrowserClient(HttpClient httpClient, ILogger<Cons
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.DeleteAsync($"{BaseUrl}/{id}", ct);
             response.EnsureSuccessStatusCode();
         }
diff --git a/TaxBaik.Web/Services/AdminClients/IContractBrowserClient.cs b/TaxBaik.Web/Services/AdminClients/IContractBrowserClient.cs
index 3b44959..aebb70d 100644
--- a/TaxBaik.Web/Services/AdminClients/IContractBrowserClient.cs
+++ b/TaxBaik.Web/Services/AdminClients/IContractBrowserClient.cs
@@ -16,15 +16,24 @@ public interface IContractBrowserClient
     Task DeleteAsync(int id, CancellationToken ct = default);
 }
 
-public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowserClient> logger)
+public class ContractBrowserClient(HttpClient httpClient, ITokenStore tokenStore, ILogger<ContractBrowserClient> logger)
     : IContractBrowserClient
 {
     private const string BaseUrl = "/api/contract";
 
+    private void EnsureAuthHeader()
+    {
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+            httpClient.DefaultRequestHeaders.Authorization = new("Bearer", tokenStore.AccessToken);
+        else
+            httpClient.DefaultRequestHeaders.Authorization = null;
+    }
+
     public async Task<List<Contract>> GetAllAsync(CancellationToken ct = default)
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<Contract>>($"{BaseUrl}", ct) ?? [];
         }
         catch (Exception ex)
@@ -38,6 +47,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<Contract>($"{BaseUrl}/{id}", ct);
         }
         catch (Exception ex)
@@ -51,6 +61,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<Contract>>($"{BaseUrl}/client/{clientId}", ct) ?? [];
         }
         catch (Exception ex)
@@ -64,6 +75,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/active", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<Contract>>(data.GetRawText()) ?? [];
@@ -80,6 +92,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/expiring?daysAhead={daysAhead}", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<Contract>>(data.GetRawText()) ?? [];
@@ -96,6 +109,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/mrr", ct);
             if (response.TryGetProperty("mrr", out var mrrValue))
                 return System.Text.Json.JsonSerializer.Deserialize<decimal>(mrrValue.GetRawText());
@@ -113,6 +127,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { clientId, contractNumber, serviceType, startDate, monthlyFee, totalAmount };
             var response = await httpClient.PostAsJsonAsync(BaseUrl, request, ct);
             response.EnsureSuccessStatusCode();
@@ -130,6 +145,7 @@ public class ContractBrowserClient(HttpClient httpClient, ILogger<ContractBrowse
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.DeleteAsync($"{BaseUrl}/{id}", ct);
             response.EnsureSuccessStatusCode();
         }
diff --git a/TaxBaik.Web/Services/AdminClients/IRevenueTrackingBrowserClient.cs b/TaxBaik.Web/Services/AdminClients/IRevenueTrackingBrowserClient.cs
index 1435dc1..e89c4bb 100644
--- a/TaxBaik.Web/Services/AdminClients/IRevenueTrackingBrowserClient.cs
+++ b/TaxBaik.Web/Services/AdminClients/IRevenueTrackingBrowserClient.cs
@@ -16,15 +16,24 @@ public interface IRevenueTrackingBrowserClient
     Task DeleteAsync(int id, CancellationToken ct = default);
 }
 
-public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<RevenueTrackingBrowserClient> logger)
+public class RevenueTrackingBrowserClient(HttpClient httpClient, ITokenStore tokenStore, ILogger<RevenueTrackingBrowserClient> logger)
     : IRevenueTrackingBrowserClient
 {
     private const string BaseUrl = "/api/revenuetracking";
 
+    private void EnsureAuthHeader()
+    {
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+            httpClient.DefaultRequestHeaders.Authorization = new("Bearer", tokenStore.AccessToken);
+        else
+            httpClient.DefaultRequestHeaders.Authorization = null;
+    }
+
     public async Task<List<RevenueTracking>> GetAllAsync(CancellationToken ct = default)
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<RevenueTracking>>($"{BaseUrl}", ct) ?? [];
         }
         catch (Exception ex)
@@ -38,6 +47,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<RevenueTracking>>($"{BaseUrl}/client/{clientId}", ct) ?? [];
         }
         catch (Exception ex)
@@ -51,6 +61,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/pending", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<RevenueTracking>>(data.GetRawText()) ?? [];
@@ -67,6 +78,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/monthly?year={year}&month={month}", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<RevenueTracking>>(data.GetRawText()) ?? [];
@@ -83,6 +95,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>(
                 $"{BaseUrl}/total?startDate={startDate:yyyy-MM-dd}&endDate={endDate:yyyy-MM-dd}", ct);
             if (response.TryGetProperty("total", out var totalValue))
@@ -101,6 +114,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { clientId, invoiceNumber, invoiceDate, amount, serviceType, dueDate };
             var response = await httpClient.PostAsJsonAsync(BaseUrl, request, ct);
             response.EnsureSuccessStatusCode();
@@ -118,6 +132,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { paymentDate };
             var response = await httpClient.PutAsJsonAsync($"{BaseUrl}/{id}/paid", request, ct);
             response.EnsureSuccessStatusCode();
@@ -132,6 +147,7 @@ public class RevenueTrackingBrowserClient(HttpClient httpClient, ILogger<Revenue
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.DeleteAsync($"{BaseUrl}/{id}", ct);
             response.EnsureSuccessStatusCode();
         }
diff --git a/TaxBaik.Web/Services/AdminClients/ITaxFilingScheduleBrowserClient.cs b/TaxBaik.Web/Services/AdminClients/ITaxFilingScheduleBrowserClient.cs
index 458abf5..44e8655 100644
--- a/TaxBaik.Web/Services/AdminClients/ITaxFilingScheduleBrowserClient.cs
+++ b/TaxBaik.Web/Services/AdminClients/ITaxFilingScheduleBrowserClient.cs
@@ -15,15 +15,24 @@ public interface ITaxFilingScheduleBrowserClient
     Task DeleteAsync(int id, CancellationToken ct = default);
 }
 
-public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFilingScheduleBrowserClient> logger)
+public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ITokenStore tokenStore, ILogger<TaxFilingScheduleBrowserClient> logger)
     : ITaxFilingScheduleBrowserClient
 {
     private const string BaseUrl = "/api/taxfilingschedule";
 
+    private void EnsureAuthHeader()
+    {
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+            httpClient.DefaultRequestHeaders.Authorization = new("Bearer", tokenStore.AccessToken);
+        else
+            httpClient.DefaultRequestHeaders.Authorization = null;
+    }
+
     public async Task<List<TaxFilingSchedule>> GetAllAsync(CancellationToken ct = default)
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<TaxFilingSchedule>>($"{BaseUrl}", ct) ?? [];
         }
         catch (Exception ex)
@@ -37,6 +46,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<TaxFilingSchedule>($"{BaseUrl}/{id}", ct);
         }
         catch (Exception ex)
@@ -50,6 +60,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<TaxFilingSchedule>>($"{BaseUrl}/client/{clientId}", ct) ?? [];
         }
         catch (Exception ex)
@@ -63,6 +74,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/upcoming?daysAhead={daysAhead}", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<TaxFilingSchedule>>(data.GetRawText()) ?? [];
@@ -80,6 +92,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { clientId, filingType, dueDate, filingYear, assignedTo };
             var response = await httpClient.PostAsJsonAsync(BaseUrl, request, ct);
             response.EnsureSuccessStatusCode();
@@ -97,6 +110,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.PutAsJsonAsync($"{BaseUrl}/{id}/complete", new { }, ct);
             response.EnsureSuccessStatusCode();
         }
@@ -110,6 +124,7 @@ public class TaxFilingScheduleBrowserClient(HttpClient httpClient, ILogger<TaxFi
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.DeleteAsync($"{BaseUrl}/{id}", ct);
             response.EnsureSuccessStatusCode();
         }
diff --git a/TaxBaik.Web/Services/AdminClients/ITaxProfileBrowserClient.cs b/TaxBaik.Web/Services/AdminClients/ITaxProfileBrowserClient.cs
index 0a20931..71849cf 100644
--- a/TaxBaik.Web/Services/AdminClients/ITaxProfileBrowserClient.cs
+++ b/TaxBaik.Web/Services/AdminClients/ITaxProfileBrowserClient.cs
@@ -17,14 +17,23 @@ public interface ITaxProfileBrowserClient
     Task DeleteAsync(int id, CancellationToken ct = default);
 }
 
-public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBrowserClient> logger) : ITaxProfileBrowserClient
+public class TaxProfileBrowserClient(HttpClient httpClient, ITokenStore tokenStore, ILogger<TaxProfileBrowserClient> logger) : ITaxProfileBrowserClient
 {
     private const string BaseUrl = "/api/taxprofile";
 
+    private void EnsureAuthHeader()
+    {
+        if (!string.IsNullOrEmpty(tokenStore.AccessToken))
+            httpClient.DefaultRequestHeaders.Authorization = new("Bearer", tokenStore.AccessToken);
+        else
+            httpClient.DefaultRequestHeaders.Authorization = null;
+    }
+
     public async Task<List<TaxProfile>> GetAllAsync(CancellationToken ct = default)
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<TaxProfile>>($"{BaseUrl}", ct) ?? [];
         }
         catch (Exception ex)
@@ -38,6 +47,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<TaxProfile>($"{BaseUrl}/{id}", ct);
         }
         catch (Exception ex)
@@ -51,6 +61,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             return await httpClient.GetFromJsonAsync<List<TaxProfile>>($"{BaseUrl}/client/{clientId}", ct) ?? [];
         }
         catch (Exception ex)
@@ -64,6 +75,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/high-risk", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<TaxProfile>>(data.GetRawText()) ?? [];
@@ -80,6 +92,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.GetFromJsonAsync<JsonElement>($"{BaseUrl}/upcoming-filings?daysAhead={daysAhead}", ct);
             if (response.TryGetProperty("data", out var data))
                 return System.Text.Json.JsonSerializer.Deserialize<List<TaxProfile>>(data.GetRawText()) ?? [];
@@ -97,6 +110,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { clientId, businessType, businessRegistration, accountingMethod, establishmentDate };
             var response = await httpClient.PostAsJsonAsync(BaseUrl, request, ct);
             response.EnsureSuccessStatusCode();
@@ -115,6 +129,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             var request = new { businessType, accountingMethod, nextFilingDueDate, taxRiskLevel };
             var response = await httpClient.PutAsJsonAsync($"{BaseUrl}/{id}", request, ct);
             response.EnsureSuccessStatusCode();
@@ -129,6 +144,7 @@ public class TaxProfileBrowserClient(HttpClient httpClient, ILogger<TaxProfileBr
     {
         try
         {
+            EnsureAuthHeader();
             var response = await httpClient.DeleteAsync($"{BaseUrl}/{id}", ct);
             response.EnsureSuccessStatusCode();
         }
diff --git a/TaxBaik.Web/Services/AdminDashboardClient.cs b/TaxBaik.Web/Services/AdminDashboardClient.cs
index e264904..8d3f004 100644
--- a/TaxBaik.Web/Services/AdminDashboardClient.cs
+++ b/TaxBaik.Web/Services/AdminDashboardClient.cs
@@ -33,10 +33,10 @@ public class AdminDashboardClient : IAdminDashboardClient
 
     private void EnsureAuthHeader()
     {
-        if (!string.IsNullOrEmpty(_tokenStore.AccessToken) && !_http.DefaultRequestHeaders.Contains("Authorization"))
-        {
+        if (!string.IsNullOrEmpty(_tokenStore.AccessToken))
             _http.DefaultRequestHeaders.Authorization = new("Bearer", _tokenStore.AccessToken);
-        }
+        else
+            _http.DefaultRequestHeaders.Authorization = null;
     }
 
     public async Task<AdminDashboardSummary> GetSummaryAsync(CancellationToken ct = default)