https://www.quickread.in/securing-graphql-apis-implementing-jwt-auth/