Refresh token should be added to the signOut body

[MisterNox]

Describe the feature

If you want to use the signOut method along with some server side token blacklists it is necessary to send the refresh token in the body of the http request. Right now no body is sent at all in the signOut method.

E.g. the django simple-jwt standard blacklist class requires the refresh token in the body.

How would you implement this?

This can be achieved in the same way as it is done in the refresh method. we can use the config.refreshToken.refreshRequestTokenPointer for the body key. To stay backwards compatible it might make sense to add the body only if we are doing a post request e.g. body: method === 'post' ? body : undefined (in case someone uses the signOut with a get request for some reason).

Additional information

• Would you be willing to help implement this feature?

Provider

• AuthJS
• Local
• Refresh
• New Provider