JWT Authentication System

JSON Web Token (JWT) is the core technology for implementing stateless authentication in our application. This document covers the design, workflow, security features, and usage of our JWT system.

RBAC Permission System

In our application, verifying who the user is (Authentication) is not enough — we also need to determine what the user is allowed to do (Authorization). This is implemented through a classic Role-Based Access Control (RBAC) system.