Design and implement secure authentication flows (sessions, tokens, OAuth/OIDC, passwordless, MFA). Use when adding login, signup, token handling, session management, or integrating identity providers.
