Authentication and authorization patterns for APIs: OAuth 2.0 authorization code and client credentials flows, JWT creation and validation, API key management, RBAC, and permission scoping across major platforms.