Authen/author acl, rbac, hrbac
Ref
- https://docs.nestjs.com/security/authentication
- https://www.loginradius.com/blog/async/guest-post/jwt-vs-sessions/
- https://blog.nodeswat.com/implement-access-control-in-node-js-8567e7b484d1
- https://blog.logrocket.com/using-accesscontrol-for-rbac-and-abac-in-node-js/