Auth routes throttled (throttle:5,1). Password reset via OTP flow. JWT stored client-side; no session for API.
Security — Authentication
JWT and auth endpoints.
JWT and auth endpoints.
Auth routes throttled (throttle:5,1). Password reset via OTP flow. JWT stored client-side; no session for API.