- Root .env.example: replace JWT_SECRET/JWT_ALGORITHM with JWT_PUBLIC_KEY, add REDIS_URL - Auth Service .env.example: JWT_PRIVATE_KEY + JWT_PUBLIC_KEY with generation instructions
Auth Service
Owns: user registration, login, JWT RS256 issuance, token refresh, /me endpoint.
Tables owned
usersrefresh_tokenssubscriptions(read; Billing Service writes)
Endpoints
POST /auth/registerPOST /auth/loginPOST /auth/refreshGET /auth/mePUT /auth/meGET /auth/verify(ForwardAuth for Traefik)