code: public void logoutServlet30(HttpServletRequest res,
                                  HttpServletResponse resp,
                                  WebAppSecurityConfig webAppSecConfig) throws ServletException {
          JaspiService jaspiService = getJaspiService();
          if (jaspiService != null) {
              try {
                  jaspiService.logout(res, resp, webAppSecConfig);
              } catch (AuthenticationException e) {
                  if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                      Tr.debug(tc, "AuthenticationException invoking JASPI service logout", e);
              }
          }
          logout(res, resp, webAppSecConfig);
      }
docs: This method is specifically for handling the Servlet 3.0 method
  HttpServletRequest.logout(). Per the JSR 196 spec, it will check for
  JASPI authentication and if enabled will attempt to call the JASPI provider's
  cleanSubject method, and will always call the main logout method.
  
  @param res
  @param resp
  @param webAppSecConfig