NextAuth v5, protecting routes with Middleware, JWT vs session strategies, and pushing auth logic to the Edge for zero-latency protection — all production-proven patterns.