Authentication

How Viana handles identity, sessions, and access control.

• Auth Flow & Tokens — JWT lifecycle, refresh token rotation, token storage
• Roles & Permissions — what each role can and cannot do