spring security HttpSessionEventPublisher & spring session HttpSessionListener
org.springframework.security.web.session.HttpSessionEventPublisher
javax.servlet.http.HttpSessionIdListener extends EventListener
How to create listener for spring session destroyed events? - Stack Overflow
https://stackoverflow.com/questions/43887583/how-to-create-listener-for-spring-session-destroyed-events
java - Session isn't destroyed just after being expired (invalidated) manually in Spring Security - Stack Overflow
https://stackoverflow.com/questions/48101252/session-isnt-destroyed-just-after-being-expired-invalidated-manually-in-sprin