Where should authentication data be stored in a modular monolith with multiple authentication strategies? (NestJS)

I’m implementing the authentication module in a modular monolith built with NestJS. Initial Draft In the first draft, the User entity included the hashed password, refresh token, and refresh token...