RewriteEngine On

RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

RewriteRule ^api(/.*)?$ api/web/$1 [L,NC]
RewriteRule ^cms(/.*)?$ backend/web/$1 [L,NC]

RewriteCond %{REQUEST_URI} !/(frontend|backend)/ [NC]
RewriteRule ^(.*)?$ frontend/web/$1 [L,NC]