https://www.somethingsblog.com/2024/10/21/graphql-access-control-secure-authorization-made-easy/