@ibacher re: your note that the ‘finally using authentication in O3’ GSoC project is active this year, I’ve shared a detailed frontend architecture in thread 49131 (openmrsFetch Location-header contract, 2FA polling, requirePasswordChange routing). Would appreciate your thoughts whenever you have a moment specifically on whether the frontend should negotiate the response version or gate behind a feature flag.