Enterprise Auth Pattern

Production-tested authentication and authorization patterns from IoT Admin Backend.

When to Use

• Implementing JWT-based authentication
• Adding role-based access control (RBAC)
• Building realm-based permission systems
• Creating session state management
• Adding auth interceptors for API calls

When NOT to Use

• Simple API key authentication (no roles needed)
• OAuth-only flows (use OAuth libraries instead)
• Serverless/stateless auth (no session needed)