Identity & access
4 modulesEverything between a visitor and an authorised session.
Email + password with hashed credentials Refresh-token rotation and session revocation Email verification and password reset flows Google OAuth sign-in
Role and permission models with seed data NestJS policy guards and Angular route guards Per-tenant role assignment Permission-aware UI directives
Profile and account settings screens Invite by email with pending-state handling Deactivate, reactivate and delete flows Admin-side user search and filters
Helmet headers and CORS configuration Rate limiting on auth and public endpoints DTO validation on every request Secrets handled through env config only
