docs: update configuration and documentation for token validation

src/Core/API/API.Core/Contracts/Auth/RefreshToken.cs

@@ -0,0 +1,19 @@
+using FluentValidation;
+
+namespace API.Core.Contracts.Auth;
+
+public record RefreshTokenRequest
+{
+   public string RefreshToken { get; init; } = default!;
+}
+
+public class RefreshTokenRequestValidator
+    : AbstractValidator<RefreshTokenRequest>
+{
+   public RefreshTokenRequestValidator()
+   {
+      RuleFor(x => x.RefreshToken)
+          .NotEmpty()
+          .WithMessage("Refresh token is required");
+   }
+}

src/Core/API/API.Core/Controllers/AuthController.cs

@@ -11,7 +11,8 @@ namespace API.Core.Controllers
     public class AuthController(
         IRegisterService registerService,
         ILoginService loginService,
-        IConfirmationService confirmationService
+        IConfirmationService confirmationService,
+        ITokenService tokenService
     ) : ControllerBase
     {
         [HttpPost("register")]
@@ -80,5 +81,28 @@ namespace API.Core.Controllers
                 }
             );
         }
+
+        [HttpPost("refresh")]
+        public async Task<ActionResult> Refresh(
+            [FromBody] RefreshTokenRequest req
+        )
+        {
+            var rtn = await tokenService.RefreshTokenAsync(
+                req.RefreshToken
+            );
+
+            return Ok(
+                new ResponseBody<LoginPayload>
+                {
+                    Message = "Token refreshed successfully.",
+                    Payload = new LoginPayload(
+                        rtn.UserAccount.UserAccountId,
+                        rtn.UserAccount.Username,
+                        rtn.RefreshToken,
+                        rtn.AccessToken
+                    ),
+                }
+            );
+        }
     }
 }