revoke all refresh tokens and use all authorization codes for user

crates/authorization_codes/src/lib.rs

@@ -26,4 +26,7 @@ impl AuthorizationCode {
     pub fn has_expired(&self) -> bool {
         self.expires_at < Utc::now()
     }
+    pub fn user(&self) -> &UserID {
+        &self.user
+    }
 }