NestJS · Authorization · Senior · Debugging
Debugging: authorized in UI but 403 from API.
Short Interview Answer
Divergent rule implementations, stale claims, or missing tenant context on server.
Detailed Explanation
Single source of truth for policies. Log deny reasons centrally (carefully).