feat(api-auth): implement refresh token rotation and revoke

2026-04-04 21:12:14 +08:00
parent efe55fdc2f
commit 074942fab4
4 changed files with 111 additions and 28 deletions
@@ -1,4 +1,5 @@
 DATABASE_URL="postgresql://postgres:postgres@localhost:5432/todolist?schema=public"
 AUTH_ACCESS_SECRET="dev-access-secret"
 AUTH_ACCESS_EXPIRES_IN_SECONDS="900"
+AUTH_REFRESH_EXPIRES_IN_SECONDS="2592000"
 AUTH_EMAIL_CODE_TTL_SECONDS="300"