code: public void invalidateAll(boolean remote) throws SecurityException {
  
          if (com.ibm.ejs.ras.TraceComponent.isAnyTracingEnabled() && LoggingUtil.SESSION_LOGGER_CORE.isLoggable(Level.FINER)) {
              String logString = "(" + remote + ") for app " + appName + " id " + getId();
              LoggingUtil.SESSION_LOGGER_CORE.entering(methodClassName, "invalidateAll", logString);
          }
          SecurityManager sm = System.getSecurityManager();
          if (sm != null) {
              sm.checkPermission(invalidateAllPerm);
          }
          SessionContextRegistry.getInstance().invalidateAll(getId(), _sessCtx.getAppName(), this, remote, false); // false
                                                                                                                   // indicates
                                                                                                                   // request
                                                                                                                   // was
                                                                                                                   // not
                                                                                                                   // remotely
                                                                                                                   // initiated
          if (com.ibm.ejs.ras.TraceComponent.isAnyTracingEnabled() && LoggingUtil.SESSION_LOGGER_CORE.isLoggable(Level.FINE)) {
              LoggingUtil.SESSION_LOGGER_CORE.exiting(methodClassName, "invalidateAll");
          }
      }
docs: /*
  invalidateAll(boolean)
  
  @see com.ibm.wsspi.servlet.session.IBMSessionExt#invalidateAll(boolean)