Auth design with rotating refresh tokens and passkeys-first MFA, even gave me the JWT claims shape29.5.2026
Handed it our marketplace and got a GraphQL schema with DataLoader batching that killed the N+126.5.2026