2 docs tagged with "authentication"

Strapi API security hardening: strict parameter validation, controller sanitization, ownership checks, token types, rate limiting, CORS, CSP, and production checklist.

Strapi authentication and permissions: JWT flow, user registration, role-based access control, custom providers, API tokens, and permission hardening.