ApiPrefixConvention already prepends api/v1 to all controllers. AuthController had it hardcoded too, resulting in the doubled route api/v1/api/v1/auth/login which caused a 404 on login attempts. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>