From 84006776b6fc221e4df0c2bd4802bdefbbb7efdc Mon Sep 17 00:00:00 2001
From: dmolinari <dmolinari@eldia.com>
Date: Tue, 14 Apr 2026 13:17:12 -0300
Subject: [PATCH] feat(app): add IRefreshTokenGenerator abstraction

---
 .../Abstractions/Security/IRefreshTokenGenerator.cs    | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 src/api/SIGCM2.Application/Abstractions/Security/IRefreshTokenGenerator.cs

diff --git a/src/api/SIGCM2.Application/Abstractions/Security/IRefreshTokenGenerator.cs b/src/api/SIGCM2.Application/Abstractions/Security/IRefreshTokenGenerator.cs
new file mode 100644
index 0000000..51995c2
--- /dev/null
+++ b/src/api/SIGCM2.Application/Abstractions/Security/IRefreshTokenGenerator.cs
@@ -0,0 +1,10 @@
+namespace SIGCM2.Application.Abstractions.Security;
+
+public interface IRefreshTokenGenerator
+{
+    /// <summary>
+    /// Generates a cryptographically secure opaque raw token (256 bits, base64url without padding).
+    /// This is the value sent to the client. It is NEVER stored — only its SHA-256 hash is persisted.
+    /// </summary>
+    string Generate();
+}