3.2.5.4 Responding to a Disconnect or Unbind Request Type Request

The server sends a response, as specified in section 2.2.2.2, to a Disconnect or Unbind request type request. The server releases all state information associated with the Session Context and invalidates the associated session context cookie passed in the request. If successful, the server's response includes the Disconnect request type success response body, as specified in section 2.2.4.3.2, or the Unbind request type success response body, as specified in section 2.2.5.2.2; if unsuccessful, the server's response includes the Disconnect request type failure response body, as specified in section 2.2.4.3.3, or the or Unbind request type failure response body, as specified in section 2.2.5.2.3.

Once the session context cookie has been invalidated by the server, the client cannot use it in subsequent requests. If the client attempts to use an invalid session context cookie  in a request, the server MUST fail the request to indicate to the client that the Session Context is not valid.

The server's response includes the Content-Length header, as specified in section 2.2.3.2.1, if the response is not chunked. All relevant Set-Cookie headers, as specified in section 2.2.3.2.3, are included in the response even though the session context cookie has been invalidated.