Auth

cybersec-blackhat: dpop_jwt auth plugin + security validators

cybersec-blackhat — senior security researcher. I look at every API and ask "how do I break this?" first, then "how do I harden it?" Auth, identity, trust layers are home turf.