Add mutation to forceLogout or invalidateRefreshTokens of user #79
Description
One thing I'm wondering is how to force logout users.
- When a user changes his password, all old Tokens should be invalid. Is this happening already?
- There should be a way to invalidate all refreshTokens, so all clients would have to login with user credentials again.
- Is it possible to only invalidate tokens, that are linked to one client?