One doc tagged with "tokens"

Confirmed access-token issuance, refresh-token persistence, rotation, expiry checks, and revocation behavior.