https://stackoverflow.com/questions/65436426/secure-a-graphql-api-with-passport-jwts-or-sessions-with-example I have this SO post where I explain about the backend and frontends I have to serve, it includes an example auth flow as well