Module CatalogCore modulesauthauth Email/password (argon2id) + OAuth 2.1, JWT, sessions, RBAC middleware. See Authentication flow for the cross-module view.