How to logout from spring security?

   Method:1

@RequestMapping("/exit")

    public void exit(HttpServletRequest request, HttpServletResponse response) {

        new SecurityContextLogoutHandler().logout(request, null, null);

        try {

              response.sendRedirect(request.getHeader("http://localhost:4200"));

              } catch (Exception e) {

          //  e.printStackTrace();

        }

    }

Method:2

@RequestMapping(value = "/logout1")

public String logout1(){

try {

        //HttpServletRequest request = null;

HttpSession session = request.getSession(false);

            session.invalidate();

        if (session != null) {

            session.invalidate();

        }

        SecurityContextHolder.clearContext();

        return "s";

    } catch (Exception e) {

        //logger.log(LogLevel.INFO, "Problem logging out.");

System.out.println("inside catch\n\n");

    return "ERROR"+e.getMessage();

    }

}

Method:3

@RequestMapping(value = {"/clear"})

public String clear(HttpServletRequest request,HttpServletResponse response){

HttpSession session= request.getSession(false);

    SecurityContextHolder.clearContext();

         session= request.getSession(false);

        if(session != null) {

            session.invalidate();

        }

        for(javax.servlet.http.Cookie cookie : request.getCookies()) {

            cookie.setMaxAge(0);

        }

    return "logout";

}

How do I fix this?

Thanks & Regards

Shilpa Kulkarni

@SpringBootApplication

@EnableEurekaClient

@EnableZuulProxy

@EnableOAuth2Sso

public class Application extends WebSecurityConfigurerAdapter {

public static void main(String[] args) {

SpringApplication.run(Application.class, args);

}

@Override

public void configure(HttpSecurity http) throws Exception {

http.authorizeRequests()

.antMatchers("/**/*.html","/login","/appLogout","/","/microservice1/viewall","/microservice2/getall")

.permitAll()

.anyRequest().authenticated()

.and()

.csrf().csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse())

.and().logout()    //logout configuration

.logoutUrl("/appLogout") 

.logoutSuccessUrl("/login")

.and().exceptionHandling() //exception handling configuration

.accessDeniedPage("/");

}

}