Review the authentication and authorization flow. Check route protection, session handling, API access control, role permissions, token handling, redirects, and user data exposure. Suggest safe improvements.
Paste into your AI coding agent before starting a task to guide a multi-step workflow.