How do you invalidate session?

To invalidate a session, you can clear the session data stored on the server and delete any corresponding session identifier from the client-side, such as a cookie. In web applications, this often involves calling a session termination function on the server side, which removes the session from the session store. Additionally, you can set the session cookie to expire immediately to ensure that the client cannot reuse it. Always ensure that proper security measures are in place to prevent session fixation or hijacking.