#auth (1)

Jul 04, 2026 1 min read Refresh token rotation, and catching token theft Rotating refresh tokens on every use, grouping them into families, and revoking the whole family when an old one comes back.