Yes you are on the right track.
I use HttpClient. HttpPost to be exact.
You
You can intailizeinitialize the token as a static String outside the Post to authentication service method then run the Post to auth request. When you extract the token from the response that comes from the auth request, save it as the as the static String you had initialized above. Once that token gets stored, then you can call the token for the email service or any other service at test if they share the token. If they don’t share the token then you basically follow the same steps above per service.
Hope this helps.