Options for constructing a RefreshTokenService.
readonly
jwt: IJwtService
The JWT service used to sign/verify tokens.
readonly
store: RefreshTokenStore
The store backing refresh tokens.
readonly
runtime: IRuntimeServices
Runtime services for random bytes and clock.
readonly
optional
accessToken: { readonly expiresIn?: string; readonly audience?: string; readonly issuer?: string; }
Optional access token options (passed through to jwt.sign).
readonly
optional
refreshTokenExpiresIn: string
Refresh token lifetime (default: '7d').
readonly
optional
accessTokenRevocationStore: IAccessTokenRevocationStore
Optional shared store for invalidating paired access tokens at logout or
refresh-token replay. Requires accessToken.expiresIn so entries remain
bounded.