Implement Refresh Token Rotation

[ayshadogo]

Description:
Create refresh token endpoint with automatic rotation for enhanced security.

Tasks:

• Create POST /auth/refresh endpoint
• Validate refresh token from database
• Implement token rotation (invalidate old, issue new)
• Check for token reuse (security breach detection)
• Update refresh token hash in database
• Return new access and refresh tokens

Acceptance Criteria:

• Old refresh tokens are invalidated after use
• New tokens are issued successfully
• Token reuse is detected and handled
• Returns 401 on invalid refresh token

[drips-wave]

This issue has been added to the Stellar Wave Program and is worth 200 Points.

🧑‍💻 Interested in contributing? Apply to work on this issue on Drips Wave, earn points, and receive rewards.

Warning

Only applications submitted via the apply link above will be considered. Please do not apply by commenting on the issue or opening a PR directly.

🤠 Repo maintainers: You can manage this issue's Points and Complexity on your Maintainer Dashboard here. Please keep an eye on applications and respond quickly 💙

ℹ️ Learn more about Drips Wave

[JerryIdoko]

@JerryIdoko has applied to work on this issue as part of the Stellar Wave Program's 2nd wave.

I would like to work on this issue.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @JerryIdoko to this issue.

[RichoKD]

@RichoKD has applied to work on this issue as part of the Stellar Wave Program's 2nd wave.

Can I work on this? I'll implement all features and test properly

ℹ️ Repo Maintainers: To accept this application, review their application or assign @RichoKD to this issue.

[Hallab7]

@Hallab7 has applied to work on this issue as part of the Stellar Wave Program's 2nd wave.

I am a backend developer. Would like to take this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Hallab7 to this issue.

[LaGodxy]

@LaGodxy has applied to work on this issue as part of the Stellar Wave Program's 2nd wave.

Hello maintainers, can I please be assigned to this, I'm an experienced developer.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @LaGodxy to this issue.

[drips-wave]

Congratulations, @LaGodxy! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on February 26, 2026.

🧑‍💻 @LaGodxy: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are issued when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been completed by @LaGodxy as part of the Stellar Wave Program's 2nd Wave 🥳

😎 @LaGodxy: You earned 200 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.