Design a secure authentication and authorization system for a mobile application. Cover token management, session handling, biometric authentication, and common attack vectors.

Sample answer preview

A secure mobile authentication system must protect user credentials, manage session lifecycle, defend against common attack vectors, and provide a seamless user experience.