Token refresh

2026-08-26 17:16:06 +02:00
parent 27f26e615a
commit 54d2e4e864
7 changed files with 167 additions and 26 deletions
@@ -181,6 +181,7 @@
 161. The popup still shows the sign-in block even though the authenticated session text is displayed; show the block only when signed out.
 162. The authenticated session text and sign-in block are still shown together.
 163. Use the VIBE directory to log interactions.
+164. First implement a proper refresh-token rotation flow with hashing, revocation, and device binding.

 ## Future entries