NestJS · Authorization · Mid-Level · Architecture
CASL or policy-based auth in Nest — why?
Short Interview Answer
Express abilities as rules tested in one place; UI and API can share vocabulary.
Detailed Explanation
Guards invoke abilities. Keep rule definitions versioned. Test policies thoroughly.