Add a column to optionally store the jti of the refresh token used to generate an access token.

[idyll]

Problem Statement

We're seeing a couple of use cases where we want to revoke a refresh token and any access tokens connected to that refresh token.

We need a way to connect the tokens and then revoke any access tokens that were generated from the refresh token.

Solution Brainstorm

To support this I imagine adding a column to the table that optionally tracks the refresh token. The refresh token could then just cascade delete its dependent tokens.

Thoughts?

It seems like a pretty clean way to revoke a refresh and any access tokens that were made from it...

[yordis]

PR welcome! 🙏🏻

[idyll]

We're just getting back around to this now. Someone will open a PR with this change once we've finished it.