title: How to handle authorization for a non-user based Laravel API?
body: <p>I have a Laravel web application for a restaurant with its own user base.
  I have another web application for a bookstore with its own different user base.</p>
  
  <p>I would like to create a third application (mostly API, probably using Lumen) that can create accounting records from both the restaurant and the bookstore on every transaction that is made (i.e. when I sell any food, make a POST request to this API to insert a record, and do the same if I sell a book).</p>
  
  <p>How can I guarantee that <strong>only</strong> authorized users from my web apps (any user) can make requests to my API, without asking them for any additional password?</p>