Authentication
Keeping tokens out of the browser with a BFF
CodeQuest uses a Spring backend-for-frontend to complete OAuth login, store the authenticated session in Redis, add access tokens to API calls, and keep the Next.js client focused on same-origin requests.
