Optional ReadonlyaccessOptional access token options (passed through to jwt.sign).
Optional ReadonlyaccessOptional shared store for invalidating paired access tokens at logout or
refresh-token replay. Requires accessToken.expiresIn so entries remain
bounded.
ReadonlyjwtThe JWT service used to sign/verify tokens.
Optional ReadonlyrefreshRefresh token lifetime (default: '7d').
ReadonlyruntimeRuntime services for random bytes and clock.
ReadonlystoreThe store backing refresh tokens.
Options for constructing a RefreshTokenService.