There is no reliable way we can contact server to invalidate session, For eg: Network loss/power loss : (no way server can be contacted)
But on browser close you may capture browser close event of user using onunload event and trigger a request to log out.
Also during session timeout listener’s sessionDestroyed() will be executed