Figure 1: For the Docker Registry to support authentication and authorization, it needs a separate auth server that issues tokens.