Invalid a access token

A auth token was stolen from a user by an unknown party, so i wanna destroy it and generate a new one, does anyone know how i can invalided a auth token?