Access control with JWT, roles and permissions
In a private project I built the complete access layer myself: JWT sessions, a role and permission system that decides per endpoint who may call what, and a rate limiter against brute force attempts. At work I later helped to introduce a JWT session and permission system on the production platform.
The demo shows the principle: select a role, receive a token, and see which endpoints accept it.
