Sessions, passwords, OAuth, 2FA, passkeys, and tokens.
Signed-cookie sessions for admin, operators, and tenant users.
Hash passwords, issue API keys, and mint tokens.
Social login, TOTP, WebAuthn, and magic links.