Fix logout: call SecurityService logout endpoint to fully invalidate session

Spegnimento

26 novembre 2025 alle ore 20:53 UTC

Autore

snadjafinia

Impegno

b551526

- Call SecurityService /api/security/logout to properly invalidate session on Java backend - This ensures session is deleted, CSRF tokens are removed, and session is fully cleaned up - Prevents issue where logging in with different account after logout still uses old session - Keep Redis cleanup as backup in case SecurityService call fails