title: Invalidate access token and refresh tokens on logout
body: <p>I'm using Firebase authentication and I directly integrate it into my app without any self-made server logic involved.</p>
  <p>I would like to invalidate all refresh tokens and the access token when a user logs out.</p>
  <p>I was pointed to <a href="https://developers.google.com/identity/protocols/oauth2/web-server#tokenrevoke" rel="nofollow noreferrer">this</a> so far but it doesn't seem to work.</p>
  <p>Is there another option how I can achieve this from my client?</p>