Invalidate JWTs on profile changes

src/RecNet.Application/Common/Security/ClaimsPrincipalExtensions.cs

@@ -16,4 +16,15 @@ public static class ClaimsPrincipalExtensions
 
         return profileId;
     }
+    
+    public static Guid GetTokenVersion(this ClaimsPrincipal user)
+    {
+        var value = user.FindFirst("token_version")?.Value;
+
+        if (!Guid.TryParse(value, out var tokenVersion))
+            throw new UnauthorizedAccessException(
+                "Token version claim is missing or invalid.");
+
+        return tokenVersion;
+    }
 }