Design and implement secure mobile authentication — OAuth2 PKCE, biometric unlock, social login, token management, and session security. Use when building login flows, adding biometrics, integrating social providers, or auditing mobile auth security.