docs: record refresh token policy extraction

2026-08-30 15:33:44 +03:30
parent ebd4788e13
commit 542512c0c5
2 changed files with 2 additions and 0 deletions
@@ -294,6 +294,7 @@ The current composition root is `cmd/serve.go`; `repository.System` aggregates P
 ### `A005` — authentication/JWT checkpoint

 - Extracted HTTP bearer-token normalization into `application/auth` and kept JWT verification/error mapping behavior unchanged; focused and full Auth tests pass in `1d72faa`.
+- Extracted refresh-token marker validation into `application/auth` while preserving refresh-flow behavior; full Auth tests pass in `4225332`.
 - A005 remains in progress: JWT validation, session checks, refresh-token flow, and broader authentication orchestration still need application ports and adapters.

 ### `I001` — publisher-backed ICO purchase map