code: private void removeEntryFromAuthCacheForToken(HttpServletRequest req, HttpServletResponse res, WebAppSecurityConfig config) {
          getAuthCacheService();
          if (authCacheService == null) {
              return;
          }
  
          Cookie[] cookies = req.getCookies();
          if (cookies != null) {
              String cookieValues[] = null;
              cookieValues = CookieHelper.getCookieValues(cookies, ssoCookieHelper.getSSOCookiename());
              if ((cookieValues == null || cookieValues.length == 0) &&
                  !SSOAuthenticator.DEFAULT_SSO_COOKIE_NAME.equalsIgnoreCase(ssoCookieHelper.getSSOCookiename())) {
                  cookieValues = CookieHelper.getCookieValues(cookies, SSOAuthenticator.DEFAULT_SSO_COOKIE_NAME);
              }
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                  Tr.debug(tc, "Cookie size: ", cookieValues == null ? "<null>" : cookieValues.length);
              if (cookieValues != null && cookieValues.length > 0) {
                  for (int n = 0; n < cookieValues.length; n++) {
                      String val = cookieValues[n];
                      if (val != null && val.length() > 0) {
                          try {
                              authCacheService.remove(val);
                              //Add token to the logged out cache if enabled
                              if (config.isTrackLoggedOutSSOCookiesEnabled())
                                  addToLoggedOutTokenCache(val);
                          } catch (Exception e) {
                              String user = req.getRemoteUser();
                              if (user == null) {
                                  Principal p = req.getUserPrincipal();
                                  if (p != null)
                                      user = p.getName();
                              }
                              Tr.warning(tc, "AUTHENTICATE_CACHE_REMOVAL_EXCEPTION", user, e.toString());
                          }
                      }
                  }
              }
          }
      }
docs: Remove entries in the authentication cache using the ltpaToken as a key
  
  @param req
  @param res
  @param config