https://blog.youkuaiyun.com/s740556472/article/details/71275328
@RequestMapping("/logout") public String logout(HttpSession session, SessionStatus sessionStatus){ session.invalidate(); sessionStatus.setComplete(); return "redirect:/login"; }
session.invalidate();只是让session失效 但session仍然存在。