https://www.somethingsblog.com/2024/10/18/secure-rest-api-with-jwt-authentication/