https://www.mekinpesen.com/security-architecture/the-security-architecture-of-a-typical-web-and-mobile-application/