In SPA you usualy bind pages to routes or hashes.. so that points to something..

For example to have central router where you check you tokens etc. Take a look this example with auth0 and ReactJS

The same as in multiple page applications.