supabase / auth / 17260451741

push

github

chore: extract token generation logic to its own package (#2135)

## Summary

Extracted common token operations from the existing `/token` endpoint to
a new `internal/tokens` package to enable code reuse for the upcoming
`/oauth/token` endpoint implementation.

## Backward Compatibility
- Type aliases: AccessTokenClaims = tokens.AccessTokenClaims in
`internal/api/token.go` to keep the changes low
- Method preservation: All existing API methods work unchanged
- Feature parity: AsRedirectURL(), hooks, validation - everything
preserved

Note on request object dependency: The service requires the HTTP
`request` object for audit log entries (`models.NewAuditLogEntry`).
While ideally the service would extract only needed context, the current
audit logging implementation requires the full request object.

287 of 382 new or added lines in 6 files covered. (75.13%)

12297 of 17365 relevant lines covered (70.81%)

70.0 hits per line