About the logout in weblogic

References:

weblogic.servlet.security.ServletAuthentication.logout()

 

Removes the authentication data from the users's session data, which logs out a user but allows the session to remain alive.

 

weblogic.servlet.security.ServletAuthentication.invalidateAll()

 

Invalidates all the sessions and removes the authentication data for the current user. The cookie is also invalidated.

 

        weblogic.servlet.security.ServletAuthentication.killCookie()

 

Invalidates the current cookie by setting the cookie so that it expires immediately when the response is sent to the browser. This method depends on a successful response reaching the user's browser. The session remains alive until it times out.