Refactor authentication flow to use JWT refresh tokens
Replaces session-based auth with stateless JWT tokens. Adds refresh token rotation, invalidation on logout, and a 15-min access token TTL.
Reviewer
Sara K.
OL-482
Risk
Medium
Checks
148 passed
No errors