In this follow-up post to How to prefix route a CakePHP 3 REST API we will implement JSON Web Token (JWT) authentication. To prevent (yet another) partial/pointless JWT tutorial we will provide you with step-by-step instructions: Describing a full blown, real world implementationUsable as drop-in code for (almost) any CakePHP 3 application requiring API authenticationSpiced up with background info