Please Reverse-Engineer the Architecture That Only Exists in the Codebase

I recently got assigned what sounded like a simple authentication task: Make tokens generated by a legacy API and a refactored API interoperable. I thought: JWT + Shared signing key + Shared validat