Add token revocation endpoint

T120B165-ImgBoard/Controllers/AuthController.cs

@@ -79,4 +79,22 @@ public class AuthController(UserManager<User> userManager, ITokenService tokenSe
         var newRefreshToken = await tokenService.GenerateRefreshToken(user);
         return Ok(new TokenDto(AccessToken: accessToken, RefreshToken: newRefreshToken));
     }
+    
+    /// <summary>
+    /// Revokes the refresh token.
+    /// </summary>
+    /// <param name="dto">Data with refresh token</param>
+    /// <response code="204">If token was revoked successfully</response>
+    /// <response code="401">If refresh token is missing or is expired</response>
+    [HttpPost("revoke")]
+    [ProducesResponseType(StatusCodes.Status204NoContent)]
+    [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+    public async Task<ActionResult<TokenDto>> Revoke(RefreshDto dto)
+    {
+        var token =  await tokenService.GetRefreshTokenByValue(dto.RefreshToken);
+        if (token == null) return Unauthorized();
+        
+        await tokenService.InvalidateRefreshToken(token);
+        return NoContent();
+    }
 }