Worked on enhancing token security in the keycloak/keycloak repository by implementing a UUID-based JWT ID (JTI) system. This approach replaced the previous method of reusing a nonce with the generation of a new UUID for each token, ensuring that every JWT issued has a unique identifier. The change addressed potential replay vulnerabilities by solidifying token uniqueness, directly improving the security posture of the authentication process. Leveraged backend development skills and a strong understanding of security principles, utilizing Java to deliver this feature. The work focused on robust token integrity, contributing to more secure authentication flows within the Keycloak platform.