title: Revoke refresh_token on change password
body: <p>We have one web application that is built on Asp.Net and then we have IdentityServer4 application built with .net core.</p>
  <p>We have mobile application which serves as client to IdentityServer4 for login and it's grants are stored in SQL database.</p>
  <p>Problem I have is when as an admin I change/reset password from web application, mobile application is still accessible because refresh_token is still valid as we have set sliding expiration for that. What I want is to revoke refresh_token when admin resets the password for any user, I don't find way to do it in asp.net application, I have used below document, but that is not useful to me as I believe this will be helpful only if we want to revoke grants for logged in user.</p>
  <p><a href="https://identitymodel.readthedocs.io/en/latest/client/revocation.html" rel="nofollow noreferrer">https://identitymodel.readthedocs.io/en/latest/client/revocation.html</a></p>
  <p>PS: We do have revoke functionality in identityServer project, but that is different project, we want similar revoke in asp.net web application.</p>
  <p>Thanks.</p>