Jakub Zych dab2b8f31a feat(08-06): implement refresh rotation, replay lineage-kill, and token sweep ...

rotateRefreshToken ports OAuthCodeManager::rotateRefresh: a fresh refresh
token rotates atomically (revoke old access token, mint successor, link
rotated_to_id) while a replayed (already-rotated) token instead revokes the
whole lineage and commits that kill before Token maps it to invalid_grant
outside the transaction (T-08-REFRESH-REPLAY). Token also runs the D-17
expiry sweep (DeleteExpiredCodes/DeleteExpiredRefreshTokens) before grant
processing. Server.Revoke is the new cascade-revoke seam a connected-app
controller uses instead of touching refresh rows directly.

2026-09-23 21:26:35 +02:00

..

authorize_test.go

feat(08-03): implement exact authorize validation and pending creation in wristband

2026-09-23 20:08:37 +02:00

authorize.go

feat(08-03): implement exact authorize validation and pending creation in wristband

2026-09-23 20:08:37 +02:00

consent_test.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

consent.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

crypto.go

test(08-02): add failing RFC 7591 registration RED test in wristband

2026-09-23 19:37:03 +02:00

register.go

feat(08-02): implement exact RFC 7591 registration in wristband

2026-09-23 19:37:54 +02:00

registration_test.go

test(08-06): add failing refresh-lifecycle RED anchor and store interface

2026-09-23 21:26:05 +02:00

server_test.go

feat(08-01): implement exact RFC 8414 metadata writer in wristband

2026-09-23 19:10:26 +02:00

server.go

feat(08-05): add wristband consent issue/deny operations

2026-09-23 20:59:24 +02:00

stores.go

test(08-06): add failing refresh-lifecycle RED anchor and store interface

2026-09-23 21:26:05 +02:00

token_test.go

test(08-06): add failing refresh-lifecycle RED anchor and store interface

2026-09-23 21:26:05 +02:00

token.go

feat(08-06): implement refresh rotation, replay lineage-kill, and token sweep

2026-09-23 21:26:35 +02:00