▸ security parameters
KDFPBKDF2-SHA256 · 600,000 iterations
SessionHMAC-SHA256 signed · 2h TTL
CookieHttpOnly · Secure · SameSite=Strict
TransportHSTS preload · TLS 1.3
Rate Limit5 attempts/min · IP-based
TimingConstant-time comparison · jitter delay
HeadersCSP · COOP · CORP · X-Frame DENY
AuthServer-side only · Edge Runtime