JWT + Refresh Token
Secure access for every dashboard.
Role-aware login, automatic verified-account activation, OTP recovery, token rotation, lockout protection, and audit logging are wired into one gateway.
5m OTP expiry
60s resend lock
5x attempt guard
Welcome back
Use email or mobile number only.