groove-net/authservice

AuthService provides registration, email confirmation, password login, MFA enrollment and verification, recovery-code use, and account-management use cases, exposed through REST endpoints and an AuthComponent gateway. Login validates input, loads the user, checks lockout and password state, persists login-attempt changes, then either returns success or issues a short-lived MFA challenge. The domain owns password and MFA rules; repositories and the unit of work persist state, while email and challenge services provide supporting integrations. README-only claims such as JWT/session handling and password-reset flows are not mapped as implemented components because the supplied tree does not show their source.