Authentication and authorization patterns including JWT, OAuth2, session management, RBAC, and security best practices for web applications.