This document concerns the design of the database throughout the project.
In scope:
Out of Scope:
oauth_clients table as the requirement “JWT key pair” does not specify
which implementation, so I chose to go with PKCE as suggested by Auth0, and this
requires registering with the backend a public client for the SPA.refresh_tokens table as per the requirement to use a “JWT key pair”
that requires refresh tokens to be persisted somewhere.Initial version. No changes.