Mastering APIs: Create your own authentication system

Guys i’ve developed this authentication system, and i want to know if it is secure to run in production. I know it should not, but i would like to know why.