Logout and InvalidSessionStrategy

I have problem during logout when I have set invalid session url.

sessionManagement()
.invalidSessionUrl("/login?sessionExpired");

Spring goes to Logout filter invalidate session and then in SessionManagerFilter check it session is valid. In that moment request point to login?logout but goes to invalidSessionStrategy and change that to login?sessionExpired. Maybe in SimpleRedirectInvalidSessionStrategy there should be some check if that url has set permitAll() and don't redirect

  public void onInvalidSessionDetected(HttpServletRequest request, HttpServletResponse response) throws IOException {
        logger.debug("Starting new session (if required) and redirecting to '" + destinationUrl + "'");
        if (createNewSession) {
            request.getSession();
        }
       // some check hier ???
        redirectStrategy.sendRedirect(request, response, destinationUrl);
    }

There is parameter to don't invalidate session in logout config but what are the security consensuses of not invalidating it ? There was probably a reason what it is by default turn on.

.logout()
.invalidateHttpSession(false)

Reproduce the logout flow using invalidSessionUrl("/login?sessionExpired") and inspect SessionManagerFilter, SimpleRedirectInvalidSessionStrategy, and the logout configuration around invalidateHttpSession(false). Determine the intended behavior when logout invalidates the session, then define and verify the resulting redirect behavior with regression coverage.