user/authn(Authentication): Authentication 功能: 用户注册 用户登录 用户退出 方案: ✅ Basic Auth（HTTP 基本认证）: http + password ✅ 基于 Session 的认证: http + cookie + session ✅ Bearer Token 或者 Basic Auth Password ✅ JWT(JSON WEB TOKEN) ✅ OAuth (开放授权) ✅ SSO ✅ 硬件加密设备: hardware tokens (FIDO U2F tokens, RSA tokens, Yubikey) ✅ 外部软件设备: mobile devices (SMS/call verification, push approvals, TOTP apps) ✅ 生物芯片: 指纹/人脸识别等 ✅ Two-factor authentication: 2FA, TFA, second-factor authentication ✅ Multi-factor authentication (MFA) 参考: hhstore/blog#381