Add blacklist view to log out users

[hodossy]

Thanks for this great library! I would like to contribute to this project with a view to effectively log out users. Currently the only way of doing it is by manually blacklisting the corresponding token. However, if a user whishes to log out, the server should invalidate the refresh token triggered by a logout request. This PR aims to fill in that gap. Many thanks for your feedback!

[Andrew-Chen-Wang]

Hey @hodossy ! Thanks for contributing! Please add some tests so that we know a token is actually invalid. Being a security library, we want to look for anything that can result in bad stuff. Scratch that! GitHub notif just showed me one commit! My bad.

I haven't had the time to take a look back at this repo in awhile (still awaiting response from David to push new version out). One of the big issues lately seems to be the blacklist app, so you'll have to wait once you finish creating those tests. Ref above comment I think, before David pushes out a new version, this can also be included since #71 is going to take awhile to finish reviewing.

[Andrew-Chen-Wang]

LGTM! Hope you don't mind, but I'm going to let @davesque review this one, as well, before merging just in case I'm missed something in my review. Thanks for the PR @hodossy!

[hodossy]

Thanks guys for merging this!

[Andrew-Chen-Wang]

Thanks for the addition!

[LavenderMP]

@hodossy Could you tell me how to use log out feature?