Spring Session Listener

org.springframework.security.core.session.SessionDestroyedEvent
org.springframework.security.core.session.HttpSessionCreatedEvent
org.springframework.security.web.session.HttpSessionEventPublisher

Declared in web.xml as

<listener>
     <listener-class>org.springframework.security.web.session.HttpSessionEventPublisher</listener-class>
</listener>

Publishes HttpSessionApplicationEvents to the Spring Root WebApplicationContext. Maps javax.servlet.http.HttpSessionListener.sessionCreated() to HttpSessionCreatedEvent. Maps javax.servlet.http.HttpSessionListener.sessionDestroyed() to HttpSessionDestroyedEvent.


Refer to:
org.springframework.security.core.session.SessionRegistryImpl
org.springframework.security.authentication.jaas.AbstractJaasAuthenticationProvider



  public void onApplicationEvent(SessionDestroyedEvent event) {
        handleLogout(event);
    }