Access protected API with JWT

[geolunalg]

EPIC: Epic: Authentication & Session Management (JWT + Refresh) #2065

Overview

User Story:
As a user, I want my session to continue seamlessly when my access token expires.

Action Items

Acceptance Criteria:

• When access token is expired and API returns 401, client calls POST /auth/refresh.
• Backend reads refresh token from cookie and:
  • if valid: returns a new access token
  • if invalid/expired: returns 401 and client routes to login
• Client retries the original request once after successful refresh.

Resources/Instructions

REPLACE THIS TEXT - If there is a website that has documentation that helps with this issue provide the link(s) here.