readme

README.md

@@ -160,7 +160,7 @@ docker compose exec backend sh
 
 | Feature | Backend | Frontend | Notes |
 |---------|---------|----------|-------|
-| JWT Authentication | ✅ | ✅ | Login, register, middleware; HS256, 30-day expiry |
+| JWT Authentication | ✅ | ✅ | Login, register, refresh, middleware; HS256, 30-day expiry, auto-refresh |
 | Booking CRUD | ✅ | ⚠️ | Backend complete; frontend submit is stub (logs only) |
 | Admin Endpoints | ✅ | ✅ | Services, users, today view, notifications |
 | Scheduling System | ✅ | ✅ | Default hours, exceptional hours, working/available hours |
@@ -168,6 +168,7 @@ docker compose exec backend sh
 | Loyalty Backend | ✅ | ❌ | DB schema ready, no frontend component |
 | VAT System | ✅ | ❌ | `get_vat_return_data()`, `calculate_vat()` functions exist |
 | User Referrals | ✅ | ❌ | `user_referrals` table, backend logic exists |
+| Token Refresh | ✅ | ✅ | POST /api/refresh-token, auto-refresh in auth store |
 
 ### ⚠️ Partially Complete
 
@@ -185,7 +186,6 @@ docker compose exec backend sh
 | Social Auth | `handlers/auth/social.go` | OAuth integration placeholder |
 | Analytics | `handlers/admin/analytics.go` | Statistics/dashboard endpoint |
 | Portfolio Images | `handlers/portfolio/images.go` | Gallery management |
-| RefreshTokenHandler | `handlers/auth/local.go:322` | Token refresh endpoint |
 
 ### 🚧 Critical TODOs
 
@@ -203,7 +203,7 @@ docker compose exec backend sh
 |---------|-------------|
 | One-off Custom Services | Allow creating single-use services not in regular catalog |
 | One-off Exceptional Hours | Single-day overrides without creating a group |
-| Auto Lunch Protection | Prevent booking during lunch hours automatically |
+| S3/R2 Image Hosting | Portfolio image storage with admin upload |
 
 ---