Update token whitelist

[wu-clan]

Hi, @downdawn

I want to add token blacklist function

Also, it seems more logical to change the whitelist function to token exclude

[downdawn]

What are the scenarios for token blacklist?

[wu-clan]

When creating a new token, the current token should expire immediately, with the option to blacklist or delete it directly

[wu-clan]

TOKEN_WHITELIST -> TOKEN_EXCLUDE

TOKEN_WHITELIST is currently only available for JWT authentication, for RBAC is not available, are we going to modify it?

[downdawn]

Both options are fine, but it's easier to communicate with a whitelist when working on the frontend.
login、captcha...

[wu-clan]

OK, I'll create a PR.

[wu-clan]

Merged: #220