Validate refresh token expires_at before rotation (#41) - #60

Merged

askmy-stack merged 2 commits into

mainfrom

security/startupintel-41-refresh-expires-at

Aug 3, 2026

Commits on Aug 2, 2026

Reject expired refresh tokens before rotation.

askmy-stack
and
cursoragent
committed
Pin ruff below 0.16 for stable CI lint.

askmy-stack
and
cursoragent
committed