feat: add refresh token rotation flow

server-rs/crates/api-server/src/http_error.rs

@@ -1,4 +1,5 @@
 use axum::{
+    http::{HeaderMap, HeaderValue},
     http::StatusCode,
     response::{IntoResponse, Response},
 };
@@ -13,6 +14,7 @@ pub struct AppError {
     code: &'static str,
     message: String,
     details: Option<Value>,
+    headers: HeaderMap,
 }
 
 #[derive(Clone, Debug, Serialize)]
@@ -32,6 +34,7 @@ impl AppError {
             code,
             message: message.to_string(),
             details: None,
+            headers: HeaderMap::new(),
         }
     }
 
@@ -49,11 +52,17 @@ impl AppError {
         self
     }
 
+    pub fn with_header(mut self, name: &'static str, value: HeaderValue) -> Self {
+        self.headers.insert(name, value);
+        self
+    }
+
     pub fn into_response_with_context(self, request_context: Option<&RequestContext>) -> Response {
         let status_code = self.status_code;
         let payload = self.to_payload();
-
-        (status_code, json_error_body(request_context, &payload)).into_response()
+        let mut response = (status_code, json_error_body(request_context, &payload)).into_response();
+        response.headers_mut().extend(self.headers);
+        response
     }
 
     fn to_payload(&self) -> ApiErrorPayload {