Session not becoming null using session.invalidate() in Wildfly 9

[nayal.ashish]

I have deployed a EAR project on Wildfly 9,but when I am logging out of the application using HttpSession:session.invalidate() method it is still giving session as io.undertow.servlet.spec.HttpSessionImpl@361561.

Please suggest me some solution

[jaikiran]

Are you expecting the session object reference that you are invoking invalidate() on, to be null after that call completes? If that's the case, then it's a wrong expectation. That's not how Java object references work. Unless you set that reference to null, it will still point to the object it was pointing to before. Of course, that doesn't mean the session is still active after the invalidate() call.

[nayal.ashish]

I want to expire JSESSIONID after logout.So that user wont be able to login with same JSESSIONID

[pferraro]

nayal.ashish Are you able to reproduce the issue with WildFly 10.1?