Authentication providers, JWT, WebAuthn, OAuth, and session resolution.