Add refresh-tokens module: JWT refresh token rotation, token families and reuse detection on Spring Security 7.1

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b6XzpJxZ25cDyuw1Uk
2026-11-15 01:19:11 +05:30
parent 760fbc2d09
commit 13e8de2193
41 changed files with 1575 additions and 0 deletions
@@ -0,0 +1,4 @@
+alice logs in on a phone and on a laptop: two families.
+phone family 1c2bb6d5, laptop family 8c9ca716
+replay of the phone's spent token: HTTP 401
+laptop refresh afterwards:         HTTP 200