src/api/SIGCM2.Application/Abstractions/Security/IRefreshTokenGenerator.cs

@@ -0,0 +1,10 @@
+namespace SIGCM2.Application.Abstractions.Security;
+
+public interface IRefreshTokenGenerator
+{
+    /// <summary>
+    /// Generates a cryptographically secure opaque raw token (256 bits, base64url without padding).
+    /// This is the value sent to the client. It is NEVER stored — only its SHA-256 hash is persisted.
+    /// </summary>
+    string Generate();
+}