Native RS256 user tokens and HS256 service tokens, guards, jti denylist and claim-based authorization for Laravel — zero third-party crypto.