Production-ready authentication microservice with JWT, RBAC, OAuth (Google & GitHub), refresh token rotation, and enterprise-grade security.