https://softwarepatternslexicon.com/js/security-patterns/patterns-for-building-secure-apis/