Register
 ↓
Generate OTP
 ↓
Send Email
 ↓
Verify OTP
 ↓
Account Activated

User Login
 ↓
Validate Credentials
 ↓
Generate Access Token
 ↓
Generate Refresh Token
 ↓
Store Session
 ↓
Response

Access Token Expired
 ↓
Rotate Token API
 ↓
Validate Refresh Token
 ↓
Generate New Access Token
 ↓
Generate New Refresh Token
 ↓
Update Session
 ↓
Response

Logout
 ↓
Delete Session
 ↓
Clear Cookie
 ↓
Success

Request
 ↓
authMiddleware
 ↓
JWT Validation
 ↓
Protected Route

Request
 ↓
authMiddleware
 ↓
adminMiddleware
 ↓
Admin Route Access