Jeff Madsen wrote a nice tutorial on how to build a simple JWToken ACL for Laravel or any web applications.

Laravel ACL