Security & Auth

This section is a single place for how authentication and permissions work in LowLatencyPubSub.

If you are new, start with:

• Tokens — format, expiry, origin/ip/region restrictions.
• Permissions model — tenant_grants, allow/deny, and what patterns are allowed in tokens.
• Threat model & best practices — rotation, least privilege, and operational advice.

For the raw protocol fields and endpoints, see:

• Client configuration
• REST API

Security & Auth