- Refresh tokens will have increased length and entropy, exceeding the current ~45‑character baseline.
- Hard‑coded length checks, fixed‑size DB columns, or regex limits may break – update validation and storage to use variable‑length fields.
- Newly issued tokens will reflect the larger size soon; existing tokens stay valid until they expire or are revoked.