namespace SIGCM2.Application.Abstractions.Security;

public interface IRefreshTokenGenerator
{
    /// <summary>
    /// Generates a cryptographically secure opaque raw token (256 bits, base64url without padding).
    /// This is the value sent to the client. It is NEVER stored — only its SHA-256 hash is persisted.
    /// </summary>
    string Generate();
}
