Authentication

JWT-based auth with short-lived tokens, API keys for services, optional MFA and WebAuthn. See Admin Console → Settings → Security.