shakeelo

Azure Entra JWT validation (JWKS cache), issuer and audience enforcement, principal normalization. Policy helpers: requireAuth, requireScopes, requireAnyScope, optionalAuth. Validate in-service even when a gateway validates upstream.

HTTP client wrapper (fetch/undici, Node 18+): timeouts, retries for idempotent methods only, correlation ID propagation. No ad-hoc HTTP clients (design rule).

Application bootstrap, starter loading, config aggregation and validation, standard error model, request context and correlation IDs, graceful shutdown and readiness toggle.

Lifecycle-managed Redis client, health check (PING), cache helpers with TTL. No collision-free counters; no sensitive data by default.