Refresh tokens for Laravel Sanctum with token families, rotation and reuse detection: a replayed token revokes its whole family, and a benign refresh race does not.
php laravel authentication multi-tenancy refresh-token api-security sanctum reuse-detection token-rotation rfc9700
-
Updated
Aug 25, 2026 - PHP