Configure Loopback MySQL Authentication/Authorization

Current API is configured but open and we need to setup JWT token authentication based on a local users table that contains the secrets and that is not called users. This authenticator must support login using a username or email and a password. Alternatively, users can also authenticate with an API key from the db that the user sends with every request. So they can login:
1. Interactive using username/pass
2. Interactive using email/pass
3. Silent using API Access Key we provide to them
Once logged in, users can only access database resources associated with their user ID.

Setup:
NodeJS Loopback latest
Closed environment you will not have access to code
I can send u the files or assist u in creating a mirror environment on ur side
Simple 2-3 tables db should be fine

Requirements
1. Secure API endpoints by Login (UI) or API (App) using tokens. One generated upon successful login and the other from the db.
2. Logged in users should only be able to access their records in any table in the DB based on their user ID
3. Provide code and work with me on testing until satisfactory implementation. Sry no access.
4. Code must be standard LoopBack4 architecture with new middleware sequence.

Please provide approach, cost and time to complete.
Timezones is Eastern, apply only if you can accommodate. Thanks.