Consume own API from linked bot

I'm looking to do the following, but have not been able to conceptualize the required steps to make this work:

• I have a user sign-up to my website using default Laravel Auth (table: users)
• I then want the user to connect/link their messenger account (e.g. Telegram or FB Messenger) to that website account. (table: services_users)
• Once linked and verified, I want the user to be able to send commands that consume the website APIs under that linked user account.

In the http request (get) I will need to send some kind of bearer token, but I am unsure how, when and where to create and set this. I've tested creating a Personal Access Token, which works, but I can't imagine it is good practice to store that PA token in the database.

Any guidance is much appreciated. Thanks!

via Chebli Mohamed