Architecture / Component

Overview

Manages user authentication, session management, and role-based access control. Uses local authentication in the prototype; designed for future external identity provider integration.

Navigation

Interface

contains Authentication Provider Interface

Referenced By 1

Architecture

contains Algorithmic Trading Platform Architecture Domain

Documents

Authentication and Authorization Service README document repo://graph/nodes/2902c7dd1d0bf0346b00dc87251d133d/artifacts/auth-service-readme.md

Authentication and Authorization Service

Responsibilities

Secures access to the platform REST API and WebSocket endpoints.

Validates credentials and issues session tokens (JWT)
Enforces role-based access control (RBAC) on API endpoints
Integrates with the REST API and WebSocket SSE Interface via the Authentication Provider Interface

Roles

Role	Permissions
`admin`	Full access: config, monitoring, trading controls
`trader`	View positions, signals, orders; trigger manual trades
`viewer`	Read-only: monitoring and reporting

Design Notes

Milestone 1: simple token-based auth (API key)
Milestone 2: JWT with refresh tokens, RBAC enforcement
Implements the Authentication Provider Interface contract

Algorithmic Trading Platform