This is pretty cool. Quite similar to the solution I have posted. The actual benefit comes when you use it for other APIs, because the app allows you to setup access control rules over individual endpoints, so that you can expose endpoints to frontends and no-code apps without worrying about security.