Can Buddy‑Auth safely add an auto‑refresh flow for expired JWTs?
Goal Evaluate the feasibility of integrating an automatic token‑refresh mechanism into Buddy‑Auth while maintaining least‑privilege principles. Constraints & Uncertainty Buddy‑Auth currently relies on a custom :unauthenticated handler that either rejects or redirects on expired credentials. No built‑in auto‑refresh exists; developers expose a separate /r
clojure