auth.service.ts

async logout(userId: string): Promise<void> {
  await this.prisma.user.update({
    where: {
      id: userId,
    },
    data: {
      hashedRefreshToken: null
    },
  });
}
async refresh(userId: string, refreshToken: string): Promise<Tokens> {
  const user = await this.prisma.user.findUnique({
    where: {
      id: userId,
    },
  });
  
  if (!user) {
    throw new ForbiddenException('Access denied');
  }
  
  const tokenMatches = await bcrypt.compare(refreshToken, user.hashedRefreshToken);
  
  // The token is invalid and we can't issue a pair of new tokens
  if (!tokenMatches) {
    throw new ForbiddenException('Access denied');
  }
  
  const tokens = this.signTokens(user.id, user.email);
  await this.updateRefreshToken(user.id, tokens.refreshToken);
  
  return tokens;
}