Account
Sign-in uses ZITADEL Authorization Code with PKCE. The API independently verifies every access token and role.