Authentication

Quick Start

When working with authentication:

1. Use auth() from @/lib/auth to get current session
2. Verify roles before admin operations
3. Use middleware for route protection
4. Never store tokens in localStorage (use httpOnly cookies)
5. Validate JWT tokens in API routes

Key Files

• auth.ts - NextAuth.js configuration
• src/lib/auth/ - Auth utilities
• middleware.ts - Route protection
• src/app/api/auth/ - Auth API routes