Auth

Authentication and authorization, OIDC, OAuth, tokens (access, refresh, site), JWT, JWKS, PKCE, hashing, rate limiting and breached password checks, explained so that non-developers can follow