diff --git a/src/internal/server/router.go b/src/internal/server/router.go
index 33cb02e..ae59d79 100644
--- a/src/internal/server/router.go
+++ b/src/internal/server/router.go
@@ -21,7 +21,7 @@ func SetupRouter(s *Server) {
 
 	s.Group("/v1").
 		Post("/login", s.LoginHandlerFn).
-		Post("/refresh", s.RefreshHandlerFn).
+		Post("/refresh", s.RefreshHandlerFn). // TODO: add JWTProtected() and get token from Auth Bearer Header not from the Body
 		Post("/register", s.RegisterHandlerFn).
 		Get("/access", JWTProtected(s), s.AccessHandlerFn)
 }