@Override
public Response requestEndSession(String idTokenHint, String postLogoutRedirectUri, String state, String sessionState,
HttpServletRequest httpRequest, HttpServletResponse httpResponse, SecurityContext sec) {
log.debug("Attempting to end session, idTokenHint: {0}, postLogoutRedirectUri: {1}, sessionState: {2}, Is Secure = {3}",
idTokenHint, postLogoutRedirectUri, sessionState, sec.isSecure());
<BUG>EndSessionParamsValidator.validateParams(idTokenHint, errorResponseFactory);
</BUG>
final Pair<SessionState, AuthorizationGrant> pair = endSession(idTokenHint, sessionState, httpRequest, httpResponse, sec);
<BUG>auditLogging(httpRequest, pair.getSecond());
if (HTTP_BASED) {</BUG>
return httpBased(postLogoutRedirectUri, state, pair);

@Override
public Response requestEndSession(String idTokenHint, String postLogoutRedirectUri, String state, String sessionState,
HttpServletRequest httpRequest, HttpServletResponse httpResponse, SecurityContext sec) {
log.debug("Attempting to end session, idTokenHint: {0}, postLogoutRedirectUri: {1}, sessionState: {2}, Is Secure = {3}",
idTokenHint, postLogoutRedirectUri, sessionState, sec.isSecure());
EndSessionParamsValidator.validateParams(idTokenHint, sessionState, errorResponseFactory);
final Pair<SessionState, AuthorizationGrant> pair = endSession(idTokenHint, sessionState, httpRequest, httpResponse, sec);
auditLogging(httpRequest, pair);
if (HTTP_BASED) {
return httpBased(postLogoutRedirectUri, state, pair);
