title: how to delete refreshtoken and access token when user logout oauth 2.0?
body: <p>i tried with ....</p>
  
  <pre><code> &lt;sec:logout invalidate-session="true" logout-success-url="/logoutsuccess" logouturl="/logout/&gt;
  </code></pre>
  
  <p>but it is not working properly....
  i want to clear everything like refresh token and access token session , cookies when user logout....</p>
  
  <p>my security-servlet.xml looks like this</p>
  
  <pre><code>&lt;!-- Protected resources --&gt;
  &lt;sec:http create-session="never" entry-point-ref="oauthAuthenticationEntryPoint"
      access-decision-manager-ref="accessDecisionManager"
      xmlns="http://www.springframework.org/schema/security"&gt;
      &lt;sec:anonymous enabled="false" /&gt;
      &lt;sec:intercept-url pattern="/data/user/*"
          access="IS_AUTHENTICATED_FULLY" /&gt;
      &lt;sec:logout delete-cookies="JSESSIONID" invalidate-session="true" /&gt;
      &lt;sec:custom-filter ref="resourceServerFilter"
          before="PRE_AUTH_FILTER" /&gt;
      &lt;sec:access-denied-handler ref="oauthAccessDeniedHandler" /&gt;
  &lt;/sec:http&gt;
  </code></pre>