Add refresh-tokens module: JWT refresh token rotation, token families and reuse detection on Spring Security 7.1

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b6XzpJxZ25cDyuw1Uk
2026-11-15 01:19:11 +05:30
parent 760fbc2d09
commit 13e8de2193
41 changed files with 1575 additions and 0 deletions
@@ -0,0 +1,10 @@
+8 requests, same refresh token, released together, reuse-grace = 5s
+  HTTP 200: 1
+  HTTP 401: 7
+family afterwards:
+  hash 07e179bf  status USED
+  hash f2fd3302  status ACTIVE
+6 seconds later, replaying the spent token again:
+  HTTP 401, family now:
+  hash 07e179bf  status REVOKED
+  hash f2fd3302  status REVOKED