feat: JWT token refresh

[tiagoapolo]

Thanks for submitting a PR! Please check the boxes below:

• I have added information to docs/ if required so people know about the feature!
• I have filled in the "Changes" section below?
• I have filled in the "How did you test this code" section below?
• I have used a Conventional Commit title for this Pull Request

Changes

Ref: #4688

This pull request replaces Sliding Tokens with Access and Refresh Tokens.

• Exposes /auth/token/refresh/ for refreshing access tokens using a valid refresh token.
• Updated authorise_response to set cookies for both AccessToken and RefreshToken
• Introduced JWTCookieTokenRefreshView for handling token refresh and updated logout view to handle RefreshToken blacklisting.
• Implemented response interceptors in api calls to handle automatic token refresh on 401 responses.

How did you test this code?

Test Settings:

• cookie_auth_enabled=True
• cors_origin_allow_all=True
• frontend => Project.cookieAuthEnabled: true in project_local.js

Regression tests:

• Authentication
• Refresh token strategy forcing an expired access token
• Forced logout removing both access and refresh tokens
• Regular logout

Test run in usage page with hard refresh

Only additional calls are /refresh calls, proving that there were no impacts in the existing api calls

• Current
  

• Using refresh token flow
  

Please describe.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

3 Skipped Deployments

Name	Status	Preview	Comments	Updated (UTC)
docs	⬜️ Ignored (Inspect)	Visit Preview		Mar 12, 2025 8:23pm
flagsmith-frontend-preview	⬜️ Ignored (Inspect)	Visit Preview		Mar 12, 2025 8:23pm
flagsmith-frontend-staging	⬜️ Ignored (Inspect)	Visit Preview		Mar 12, 2025 8:23pm

[github-actions]

Uffizzi Ephemeral Environment deployment-61661

☁️ https://app.uffizzi.com/github.com/Flagsmith/flagsmith/pull/5200

📄 View Application Logs etc.

What is Uffizzi? Learn more!

[github-actions]

Uffizzi Ephemeral Environment Deploying

☁️ https://app.uffizzi.com/github.com/Flagsmith/flagsmith/pull/5200

⚙️ Updating now by workflow run 13820830076.

What is Uffizzi? Learn more!

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-api-test:pr-5200	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-e2e:pr-5200	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-api:pr-5200	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-5200	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-5200	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-frontend:pr-5200	Finished ✅	Results ✅