https://stevenroland.com/posts/securing-your-laravel-api-with-passport-a-comprehensive-guide