Authentication and Authorization

default admin

policies

api

pages

Implementation details

• jwt tokens in the api
• cookies in the web
• access tokens cached in redis
• BFF for web client requests
• refresh tokens