https://0xghazy.github.io/posts/authentication-with-javascript-web-tokens/