diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/AccessTokenAuthEventsHandler.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/AccessTokenAuthEventsHandler.cs
deleted file mode 100644
index 09f5262..0000000
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/AccessTokenAuthEventsHandler.cs
+++ /dev/null
@@ -1,30 +0,0 @@
-using Microsoft.AspNetCore.Authentication.JwtBearer;
-
-namespace FIAP.TechChallenge.ByteMeBurger.Api.Auth;
-
-/// <summary>
-/// Singleton class handler of events related to JWT authentication
-/// </summary>
-internal class AccessTokenAuthEventsHandler : JwtBearerEvents
-{
-    private const string BearerPrefix = "Bearer ";
-
-    private AccessTokenAuthEventsHandler() => OnMessageReceived = MessageReceivedHandler;
-
-    /// <summary>
-    /// Gets single available instance of <see cref="AccessTokenAuthEventsHandler"/>
-    /// </summary>
-    public static AccessTokenAuthEventsHandler Instance { get; } = new AccessTokenAuthEventsHandler();
-
-    private Task MessageReceivedHandler(MessageReceivedContext context)
-    {
-        if (context.Request.Headers.TryGetValue("AccessToken", out var headerValue) &&
-            !string.IsNullOrWhiteSpace(headerValue))
-        {
-            var accessToken = headerValue.ToString();
-            context.Token = accessToken.StartsWith(BearerPrefix) ? accessToken[BearerPrefix.Length..] : accessToken;
-        }
-
-        return Task.CompletedTask;
-    }
-}
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/BmbRoles.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/BmbRoles.cs
deleted file mode 100644
index b26e8c0..0000000
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/BmbRoles.cs
+++ /dev/null
@@ -1,8 +0,0 @@
-namespace FIAP.TechChallenge.ByteMeBurger.Api.Auth;
-
-public static class BmbRoles
-{
-    public const string Admin = "admin";
-    public const string Kitchen = "kitchen";
-    public const string Customer = "customer";
-}
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtExtensions.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtExtensions.cs
index 2ef88de..dad5f71 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtExtensions.cs
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtExtensions.cs
@@ -1,8 +1,5 @@
 using System.Security.Claims;
-using System.Text;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Dto;
-using Microsoft.IdentityModel.Tokens;
-
 namespace FIAP.TechChallenge.ByteMeBurger.Api.Auth;
 
 /// <summary>
@@ -10,39 +7,6 @@ namespace FIAP.TechChallenge.ByteMeBurger.Api.Auth;
 /// </summary>
 public static class JwtExtensions
 {
-    /// <summary>
-    /// Configure Jtw token validation
-    /// </summary>
-    /// <param name="services">Service collection</param>
-    /// <param name="configuration">Configuration</param>
-    public static void ConfigureJwt(this IServiceCollection services, IConfiguration configuration)
-    {
-        var jwtOptions = configuration
-            .GetSection("JwtOptions")
-            .Get<JwtOptions>();
-
-        services.AddAuthentication()
-            .AddJwtBearer(options =>
-            {
-                if (jwtOptions.UseAccessToken)
-                {
-                    options.Events = AccessTokenAuthEventsHandler.Instance;
-                }
-
-                options.TokenValidationParameters = new TokenValidationParameters
-                {
-                    ValidIssuer = jwtOptions.Issuer,
-                    ValidAudience = jwtOptions.Audience,
-                    ValidateAudience = true,
-                    ValidateIssuer = true,
-                    ValidateLifetime = true,
-                    LogValidationExceptions = true,
-                    IssuerSigningKey =
-                        new SymmetricSecurityKey(Encoding.UTF8.GetBytes(jwtOptions.SigningKey))
-                };
-            });
-    }
-
     // https://stackoverflow.com/a/55740879/2921329
     /// <summary>
     /// Get customer details from Jwt Claims
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtOptions.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtOptions.cs
deleted file mode 100644
index 41e22fd..0000000
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Auth/JwtOptions.cs
+++ /dev/null
@@ -1,20 +0,0 @@
-using System.Diagnostics.CodeAnalysis;
-
-namespace FIAP.TechChallenge.ByteMeBurger.Api.Auth;
-
-/// <summary>
-/// JWT token config
-/// </summary>
-/// <param name="Issuer">Issuer</param>
-/// <param name="Audience">Audience</param>
-/// <param name="SigningKey">Signing key secret</param>
-/// <param name="ExpirationSeconds">Expiration in seconds</param>
-/// <param name="UseAccessToken">Flag to use AccessCode header instead of normal Authorization header.</param>
-[ExcludeFromCodeCoverage]
-public record JwtOptions(
-    string Issuer,
-    string Audience,
-    string SigningKey,
-    int ExpirationSeconds,
-    bool UseAccessToken
-);
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/CustomersController.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/CustomersController.cs
index 57b0a04..5a2cb3a 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/CustomersController.cs
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/CustomersController.cs
@@ -1,5 +1,5 @@
 using System.ComponentModel.DataAnnotations;
-using FIAP.TechChallenge.ByteMeBurger.Api.Auth;
+using Bmb.Auth;
 using FIAP.TechChallenge.ByteMeBurger.Api.Model.Customers;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Contracts;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Dto;
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/OrdersController.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/OrdersController.cs
index 791dfb3..03313a5 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/OrdersController.cs
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/OrdersController.cs
@@ -1,9 +1,10 @@
 using System.Collections.ObjectModel;
-using FIAP.TechChallenge.ByteMeBurger.Api.Auth;
+using Bmb.Auth;
 using FIAP.TechChallenge.ByteMeBurger.Api.Model.Orders;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Contracts;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Dto;
 using Bmb.Domain.Core.ValueObjects;
+using FIAP.TechChallenge.ByteMeBurger.Api.Auth;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Caching.Hybrid;
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/ProductsController.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/ProductsController.cs
index 6c0cd16..03df65a 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/ProductsController.cs
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/Controllers/ProductsController.cs
@@ -1,4 +1,4 @@
-using FIAP.TechChallenge.ByteMeBurger.Api.Auth;
+using Bmb.Auth;
 using FIAP.TechChallenge.ByteMeBurger.Api.Model.Products;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Contracts;
 using FIAP.TechChallenge.ByteMeBurger.Controllers.Dto;
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/FIAP.TechChallenge.ByteMeBurger.Api.csproj b/src/FIAP.TechChallenge.ByteMeBurger.Api/FIAP.TechChallenge.ByteMeBurger.Api.csproj
index 5708290..583aa86 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/FIAP.TechChallenge.ByteMeBurger.Api.csproj
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/FIAP.TechChallenge.ByteMeBurger.Api.csproj
@@ -18,8 +18,8 @@
     <ItemGroup>
         <PackageReference Include="AspNetCore.HealthChecks.MySql" Version="8.0.1" />
         <PackageReference Include="AspNetCore.HealthChecks.UI.Client" Version="8.0.1" />
+        <PackageReference Include="Bmb.Auth" Version="0.0.1" />
         <PackageReference Include="Bmb.Domain.Core" Version="0.0.12" />
-        <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.2" />
         <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="8.0.3"/>
         <PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.0.2" />
         <PackageReference Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="8.0.2" />
diff --git a/src/FIAP.TechChallenge.ByteMeBurger.Api/Program.cs b/src/FIAP.TechChallenge.ByteMeBurger.Api/Program.cs
index 32ae9f9..28f2604 100644
--- a/src/FIAP.TechChallenge.ByteMeBurger.Api/Program.cs
+++ b/src/FIAP.TechChallenge.ByteMeBurger.Api/Program.cs
@@ -1,7 +1,7 @@
 using System.Diagnostics.CodeAnalysis;
 using System.Reflection;
 using System.Text.Json.Serialization;
-using FIAP.TechChallenge.ByteMeBurger.Api.Auth;
+using Bmb.Auth;
 using FIAP.TechChallenge.ByteMeBurger.DI;
 using HealthChecks.UI.Client;
 using Microsoft.AspNetCore.Diagnostics.HealthChecks;
diff --git a/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/FIAP.TechChallenge.ByteMeBurger.Application.Test.csproj b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/FIAP.TechChallenge.ByteMeBurger.Application.Test.csproj
index 8e4b82f..261d30d 100644
--- a/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/FIAP.TechChallenge.ByteMeBurger.Application.Test.csproj
+++ b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/FIAP.TechChallenge.ByteMeBurger.Application.Test.csproj
@@ -29,4 +29,10 @@
       <ProjectReference Include="..\FIAP.TechChallenge.ByteMeBurger.Test.Common\FIAP.TechChallenge.ByteMeBurger.Test.Common.csproj" />
     </ItemGroup>
 
+    <ItemGroup>
+      <None Update="UseCases\Orders\Gherkin\CreateOrder.feature">
+        <CopyToOutputDirectory>Always</CopyToOutputDirectory>
+      </None>
+    </ItemGroup>
+
 </Project>
diff --git a/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrder.feature b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrder.feature
new file mode 100644
index 0000000..9ba190d
--- /dev/null
+++ b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrder.feature
@@ -0,0 +1,8 @@
+Feature: Create new order
+
+  Scenario: Create a new order successfully
+    Given Selected product exists
+    And Tracking code is created
+    When UseCase is called
+    Then it should create the order
+    And it should publish integration event
diff --git a/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrderSteps.cs b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrderSteps.cs
new file mode 100644
index 0000000..dc11b21
--- /dev/null
+++ b/tests/FIAP.TechChallenge.ByteMeBurger.Application.Test/UseCases/Orders/Gherkin/CreateOrderSteps.cs
@@ -0,0 +1,73 @@
+using Bmb.Domain.Core.Events;
+using Bmb.Domain.Core.Interfaces;
+using FIAP.TechChallenge.ByteMeBurger.Application.UseCases.Orders;
+using Xunit.Gherkin.Quick;
+using OrderCreated = Bmb.Domain.Core.Events.Integration.OrderCreated;
+
+namespace FIAP.TechChallenge.ByteMeBurger.Application.Test.UseCases.Orders.Gherkin;
+
+[FeatureFile("./UseCases/Orders/Gherkin/CreateOrder.feature")]
+public class CreateOrderSteps : Feature
+{
+// Given Selected product exists
+// And Tracking code is created
+// When UseCase is called
+// Then it should create the order
+    private readonly CreateOrderUseCase _useCase;
+    private readonly Mock<IProductRepository> _mockProductRepository;
+    private readonly Mock<IOrderTrackingCodeService> _mockOrderTrackingCodeService;
+    private readonly Mock<IDispatcher> _mockDispatcher;
+    private Order _order;
+    private Product _product;
+
+    public CreateOrderSteps()
+    {
+        _mockDispatcher = new Mock<IDispatcher>();
+        _mockProductRepository = new Mock<IProductRepository>();
+        _mockOrderTrackingCodeService = new Mock<IOrderTrackingCodeService>();
+
+        _useCase = new CreateOrderUseCase(_mockProductRepository.Object, _mockOrderTrackingCodeService.Object,
+            _mockDispatcher.Object);
+    }
+
+    [Given("Selected product exists")]
+    public void SetupExistingProduct()
+    {
+        _product = new Product(Guid.NewGuid(), "product", "description", ProductCategory.Drink, 10, []);
+        _mockProductRepository.Setup(p => p.FindByIdAsync(_product.Id))
+            .ReturnsAsync(_product)
+            .Verifiable();
+    }
+
+    [And("Tracking code is created")]
+    public void SetupTrackingCode()
+    {
+        _mockOrderTrackingCodeService.Setup(s => s.GetNextAsync())
+            .ReturnsAsync(new OrderTrackingCode("code"))
+            .Verifiable();
+    }
+
+    [When("UseCase is called")]
+    public async Task WhenUseCaseIsCalled()
+    {
+        _order = await _useCase.Execute(null, new List<SelectedProduct>
+        {
+            new(_product.Id, 1)
+        });
+    }
+
+    [Then("it should create the order")]
+    public void ThenItShouldCreateTheOrder()
+    {
+        _order.Should().NotBeNull();
+        _order.TrackingCode.Should().Be(new OrderTrackingCode("code"));
+        _order.OrderItems[0].ProductId.Should().Be(_product.Id);
+        _mockProductRepository.VerifyAll();
+    }
+
+    [And("it should publish integration event")]
+    public void ThenItShouldPublishTheEvent()
+    {
+        _mockDispatcher.Verify(d => d.PublishIntegrationAsync(It.IsAny<OrderCreated>(), default), Times.Once);
+    }
+}
diff --git a/tests/FIAP.TechChallenge.ByteMeBurger.Test.Common/FIAP.TechChallenge.ByteMeBurger.Test.Common.csproj b/tests/FIAP.TechChallenge.ByteMeBurger.Test.Common/FIAP.TechChallenge.ByteMeBurger.Test.Common.csproj
index 034172b..668e41d 100644
--- a/tests/FIAP.TechChallenge.ByteMeBurger.Test.Common/FIAP.TechChallenge.ByteMeBurger.Test.Common.csproj
+++ b/tests/FIAP.TechChallenge.ByteMeBurger.Test.Common/FIAP.TechChallenge.ByteMeBurger.Test.Common.csproj
@@ -15,6 +15,7 @@
         <PackageReference Include="coverlet.collector" Version="6.0.0"/>
         <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.8.0"/>
         <PackageReference Include="xunit" Version="2.5.3"/>
+        <PackageReference Include="Xunit.Gherkin.Quick" Version="4.5.0" />
         <PackageReference Include="xunit.runner.visualstudio" Version="2.5.3"/>
     </ItemGroup>
 
diff --git a/tf/variables.tf b/tf/variables.tf
index c323b95..2f8880b 100644
--- a/tf/variables.tf
+++ b/tf/variables.tf
@@ -1,6 +1,6 @@
 variable "rds_cluster_identifier" {
   type    = string
-  default = "techchallenge-mysql-default"
+  default = "gh-techchallenge-mysql"
 }
 
 variable "profile" {
@@ -17,7 +17,7 @@ variable "region" {
 
 variable "eks_cluster_name" {
   type    = string
-  default = "quixada"
+  default = "eks_dev_quixada"
 }
 
 variable "apgw_name" {
@@ -28,6 +28,7 @@ variable "apgw_name" {
 variable "jwt_signing_key" {
   type      = string
   sensitive = true
+  default = ""
 }
 
 variable "jwt_issuer" {
@@ -44,7 +45,7 @@ variable "jwt_aud" {
 
 variable "api_docker_image" {
   type    = string
-  default = "ghcr.io/soat-fiap/fiap.techchallenge.bytemeburger/api:sha-b83177c"
+  default = "ghcr.io/soat-fiap/fiap.techchallenge.bytemeburger/api:latest"
 }
 
 variable "internal_elb_name" {
@@ -55,28 +56,28 @@ variable "internal_elb_name" {
 variable "db_user" {
   type      = string
   sensitive = true
-  default   = "db_user"
+  default   = "test"
 }
-
 variable "db_pwd" {
   type      = string
   sensitive = true
-  default   = "db_password"
+  default   = "test"
 }
 
 variable "api_access_key_id" {
   type      = string
   nullable  = false
   sensitive = true
+  default = ""
 }
 
 variable "api_secret_access_key" {
   type      = string
   nullable  = false
   sensitive = true
+  default = ""
 }
-
 variable "user_pool_name" {
   type    = string
-  default = "bmb-users-pool-local"
+  default = "bmb-users-pool-dev"
 }