• Identity framework – user registration, login, roles
  • JWT / OAuth – token generation, validation
  • Policy & Role-based authorization – [Authorize], custom policies