Security Guidelines

@shamilsuraweera/true-root-v1-security-guidelines-md

- Use strong secret keys (minimum 256 bits) - Set appropriate token expiration (15-30 minutes for access tokens) - Validate tokens on every protected endpoint - Never expose tokens in logs or error...