- Add field_validator to expand literal \n in PEM keys (auth config + shared config) - Set extra='ignore' on shared Settings so service-specific .env vars don't cause ValidationError - Add *.pem to .gitignore
Auth Service
Owns: user registration, login, JWT RS256 issuance, token refresh, /me endpoint.
Tables owned
usersrefresh_tokenssubscriptions(read; Billing Service writes)
Endpoints
POST /auth/registerPOST /auth/loginPOST /auth/refreshGET /auth/mePUT /auth/meGET /auth/verify(ForwardAuth for Traefik)