token-rotation
Device-level session management for Django REST Framework. JWT refresh tokens rotate on a whitelist, and a replayed token revokes the whole session instead of just being rejected.
