An authentication server that manages user login, refresh token lifecycle, and supports multiple scopes for secure access control across different application domains.