- Add auth.enable configuration field (default: true) - Add TokenService initialization in account service - Implement token exchange endpoint (/api/auth/token/exchange) - Implement token refresh endpoint (/api/auth/token/refresh) - Protect routes with JWT authentication middleware - Update configuration structures for all services - Support accessSecret with configurable expiry times - Update token management script to handle all token types - Validate auth configuration consistency across services
- Add token service and MFA service to account service - Implement auth middleware for request validation - Add token-based auth to dashboard and RAG server - Update configuration files for auth settings
