JWT doubts in practice

I created a portal where the user registers and accesses it with cpf and email. When the user enters the portal, it will have a table that will be filled according to which user just entered (there is only 1 api with data of several users), and I was able to make the api take the parameter of cpf and email to make a select and play the right data of each user. So, do I need to do some authentication with jwt etc?