What Am I trying?
I already have a website and I am trying Token based authentication for an API in same code and below is the start for sample auth
Open your app\http\Middleware\VerifyCsrfToken.php file.
app\http\Middleware\VerifyCsrfToken.php
Here edit $except property with:
$except
protected $except = [ 'api/*' ];
This will exclude your api routes from CSRF verification.