title: Spring boot Security, Oauth2 logout, invalidate session in order to go through the authentication and approval cycle in the authorization server
body: <p>I have been following Dave Syer tutorial, SSO with OAuth2, Part 5  <a href="https://github.com/spring-guides/tut-spring-security-and-angular-js/tree/master/oauth2" rel="nofollow">https://github.com/spring-guides/tut-spring-security-and-angular-js/tree/master/oauth2</a></p>
  
  <p>It has UI/API gateway, resource server and Authorization server. 
  When i click logout from UI/API gateway application i get the following,<a href="http://i.stack.imgur.com/T7WO0.jpg" rel="nofollow">enter image description here</a> Cors issue</p>
  
  <p>What is currently happening from Dave Syer tutorial is that when a user click logout it changes the authentication flag to false, making it seem the user has logged out but they have only logged out from the UI/API gateway application. </p>
  
  <p>When user click login, remember they haven’t logout from the Authentication server. Therefore, user doesn’t go through the authentication and approval cycle again. </p>
  
  <p>What I want, when a user click logout and try to login again user must input username and password. In fact, they should start afresh, meaning system should invalidate the session and or token.</p>
  
  <p>I've been banging my head against a wall trying to find a solution for this. Can anyone please point out how to resolve/ achieve this. </p>