https://lilanga.github.io/posts/token-based-authorisation-with-jwt/