https://mixrolikus.cc/video/AGUGKXmBg4A/building-a-custom-authorization-handler-in-asp-net-core