# Authentication (Optional)

Add authentication only when the product requires it. Keep session lookup at
the route/use-case boundary, keep secrets server-only, and pass a small typed
actor/context object into use cases instead of importing an auth provider
through all features.