wizardchen 235e86b876 fix(security): harden refresh token validation and add auth tests ...

Reject refresh attempts when the DB token type is not refresh_token,
and add service-layer tests for bearer refresh rejection, logout
revocation, and expired-token logout handling.

2026-07-02 17:08:17 +08:00

..

repository

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

service

fix(security): harden refresh token validation and add auth tests

2026-07-02 17:08:17 +08:00