TokenAuth.config.xml

<configuration xmlns:patch="http://www.sitecore.net/xmlconfig/">
    <sitecore>
        <settings>
            <setting name="Sitecore.Services.Token.Authorization.Enabled">
                <patch:attribute name="value">true</patch:attribute>
            </setting>
            <setting name="Sitecore.Services.SecurityPolicy">
                <patch:attribute name="value">Sitecore.Services.Infrastructure.Web.Http.Security.ServicesOnPolicy, Sitecore.Services.Infrastructure</patch:attribute>
            </setting>
            <setting name="Sitecore.Services.Token.Authorization.Timeout">
                    <patch:attribute name="value">20</patch:attribute>
            </setting>
        </settings>

        <api>
            <tokenSecurity>
                <signingProvider type="Sitecore.Services.Infrastructure.Sitecore.Security.SymetricKeySigningProvider, Sitecore.Services.Infrastructure.Sitecore">
                    <param desc="connectionStringName">Sitecore.Services.Token.SecurityKey</param>
                </signingProvider>
            </tokenSecurity>
        </api>
        <pipelines>
            <httpRequestBegin>
                <processor type="MyWebsite.TokenAuthUserResolver, MyWebsite" resolve="true" patch:after="processor[@type='Sitecore.Pipelines.HttpRequest.UserResolver, Sitecore.Kernel']"/>
            </httpRequestBegin>
        </pipelines>
    </sitecore>
</configuration>