01Verifies RS256 / ES256 JWT access tokens via remote JWKS.
02Validates `iss`, `aud`, and expiry claims for token integrity.
03Auto-provisions local user records upon first authentication.
04Injects comprehensive authentication context (e.g., `userId`, `roles`, `permissions`) into requests and sockets.
05Provides an admin role guard for Socket.IO namespaces to restrict access.
060 GitHub stars