JWT Authentication

JSON Web Tokens (JWT) are compact, URL-safe tokens containing claims about a user's identity and permissions, signed with a secret key. MOVO-X uses HS256-signed JWTs (via the 'jose' library in Next.js 16) with 1-hour expiry and HttpOnly cookie storage. The token payload carries user ID, role, hospital ID, group ID, and department ID — enabling the middleware to enforce access control without a database round-trip on every request.