[keycloak-user] OIDC Servlet filter not redirect to to login screen after admin kick user out by KC admin console

[Nhut Thai Le]

Hello,

I'm using the OIDC Servlet filter to protect my app and it works when the
user first come to the site. However after the user successfully login and
using  the app, if the admin use the keycloak admin console to kick the
user out (use logout all button on the realm sessions tab) I expect the
user will be redirected to the login page on his next request but he is
still able to continue working as if the keycloak oidc servlet filter think
the session is still valid. Is this behavior normal? If it is, what can be
done to force user logout? If it is not, what would be the possible cause?

Thank you

Thai