https://www.robod.dev/posts/blazor-api-azure-entra-roles/