D
Engineering

Auth & JWT

JWT HS256 — validation-only. Tokens are issued by dazoapp (Laravel) and validated here. Excluded paths skip auth, IP allowlist bypass, algorithm not pinned.