⚠️ Còn Thiếu (Tùy chọn mở rộng) - Authorization Code Flow - Cho OAuth2 web apps - Role/Permission Management APIs - CRUD roles - Email Verification - Confirm email - 2FA/MFA - Two-factor authentication - Social Login - Google, Facebook, etc.