A refresh token record stored on the server.
readonly
jti: string
Unique token identifier (from JWT jti claim).
readonly
principalId: string
Principal ID the token belongs to.
readonly
principal: IPrincipal
Snapshot of the principal at issue time.
readonly
expiresAt: number
Absolute expiry timestamp (ms since epoch).
revoked: boolean
Whether the token has been revoked.
readonly
optional
familyId: string
Family identifier shared by a rotated refresh-token lineage.
readonly
optional
accessTokenJti: string
Identifier of the paired access token, when issued by the current service.
readonly
optional
accessTokenExpiresAt: number
Absolute expiry timestamp for the paired access token.