https://techliphant.com/blog/protecting-laravel-apis-with-sanctum-implementing-rbac/