-
- JwtProperties: @ConfigurationProperties("jwt") with secret/expiry - JwtUtil: generateAccessToken/generateRefreshToken/parseAccessToken/parseRefreshToken - parseRefreshToken validates type=refresh claim, throws 40103 if mismatch - JwtUtilTest: 3 tests PASS
