Add refresh-tokens module: JWT refresh token rotation, token families and reuse detection on Spring Security 7.1

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b6XzpJxZ25cDyuw1Uk
2026-11-15 01:19:11 +05:30
parent 760fbc2d09
commit 13e8de2193
41 changed files with 1575 additions and 0 deletions
@@ -0,0 +1,10 @@
+login as alice
+  access token: JWT, sid=22badf84
+  access lifetime: 300 seconds
+  refresh token: 43 characters, dots in it: 0
+after login, refresh(A) -> B, refresh(B) -> C, one family:
+  token A   hash 7a05668b  status USED
+  token B   hash 7bb7862a  status USED
+  token C   hash a661d1ea  status ACTIVE
+sid of the access token minted from C: 22badf84
+family id in the table:                22badf84