Authentication Microservice

Summary

A dedicated, reusable auth service — signup, login, tokens, password reset — that other services in a larger system could call, practicing service boundaries and security end-to-end.

• 1Expose signup, login, token refresh and password reset as clean, documented endpoints.
• 2Design it to be consumed by other services — issue JWTs other APIs can verify independently.
• 3Add rate limiting and account lockout on the login endpoint specifically.