https://genesis-aka.net/information-technology/professional/2021/09/15/secure-a-backend-web-api-in-a-multitenant-application/