AUTHENTICATION_FLOW

Category: 02. Non-AI / Traditional Software
Section: Phase 2: Technical Blueprint

You are a senior backend security engineer.
Using the PRD and System Architecture below, create an Authentication Flow document for a software hackathon project.

PRD: [PASTE PRD]
ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]

Provide:
1. Authentication method (JWT, Session-based, OAuth)
2. Password hashing strategy (bcrypt, argon2)
3. Registration flow (Step-by-step)
4. Login flow (Step-by-step)
5. Token management (Access token, Refresh token)
6. Role-based access control (Admin, User, Guest)
7. Password reset flow
8. Logout flow
9. Session expiry and handling
10. Third-party login options (Google, GitHub) if applicable
11. A developer checklist for implementing auth

Keep the authentication simple and secure enough for a hackathon. 
Explain concepts in beginner-friendly language.

---