Role and Permission Authorization

The previous article covered Authentication with Passport and JWT: verifying who a user is and issuing a token that proves it.