supertokens/supertokens-core ? reverse-engineered prompt

Build me a self hosted authentication service in Java that works like an open source alternative to Auth0 or AWS Cognito. It should handle secure sign up, sign in, sign out, session creation and refresh, and support common login methods like email and password, passwordless login, social login, and phone based login. I want it to be something I can run with my own database so I keep full control of user data, and it should be easy for another app to plug into through simple HTTP APIs. Please include support for multi factor auth, user roles, and basic multi tenant or organization style auth if that fits naturally. Make it production ready, with good security, clear config, and a way to build and run it locally. If you need to check current docs or patterns, look them up online first.