diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5b19cfed..7249a87f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,12 @@
 # Changelog
 
-## Unreleased
+## 1.2.0
+
+- [B/C Break] Removed the `Gesdinet\JWTRefreshTokenBundle\EventListener\LogoutEventListener` service definition; if needed, an abstract `gesdinet_jwt_refresh_token.security.listener.logout` definition replaces it and does not have a `kernel.event_listener` tag
+- [B/C Break] The `logout_firewall` config node default value is now null
+- Deprecated the `logout_firewall` config node, the `invalidate_token_on_logout` option should be set on the `refresh_jwt` authenticator
+
+## 1.1.0
 
 - [B/C Break] Changed the object mappings to mapped superclasses, this requires updating your app's configuration
 - Added support for checking the request path in the `refresh_jwt` authenticator
diff --git a/DependencyInjection/Configuration.php b/DependencyInjection/Configuration.php
index aef81626..a0176aa4 100644
--- a/DependencyInjection/Configuration.php
+++ b/DependencyInjection/Configuration.php
@@ -109,8 +109,9 @@ public function getConfigTreeBuilder(): TreeBuilder
                     ->end()
                 ->end()
                 ->scalarNode('logout_firewall')
-                    ->defaultValue('api')
-                    ->info('Name of the firewall that triggers the logout event to hook into (default: api)')
+                    ->setDeprecated(...$this->getDeprecationParameters('The "%node%" node is deprecated, enable the "invalidate_token_on_logout" option on the "refresh_jwt" firewall instead.', '1.2'))
+                    ->defaultNull()
+                    ->info('Name of the firewall that triggers the logout event to hook into')
                 ->end()
                 ->scalarNode('return_expiration')
                     ->defaultFalse()
diff --git a/DependencyInjection/GesdinetJWTRefreshTokenExtension.php b/DependencyInjection/GesdinetJWTRefreshTokenExtension.php
index 1093b068..bc172093 100644
--- a/DependencyInjection/GesdinetJWTRefreshTokenExtension.php
+++ b/DependencyInjection/GesdinetJWTRefreshTokenExtension.php
@@ -16,10 +16,13 @@
 use Gesdinet\JWTRefreshTokenBundle\Document\RefreshToken as RefreshTokenDocument;
 use Gesdinet\JWTRefreshTokenBundle\Entity\RefreshToken as RefreshTokenEntity;
 use Gesdinet\JWTRefreshTokenBundle\Request\Extractor\ExtractorInterface;
+use Symfony\Component\DependencyInjection\ChildDefinition;
 use Symfony\Component\DependencyInjection\ContainerBuilder;
 use Symfony\Component\Config\FileLocator;
+use Symfony\Component\DependencyInjection\Parameter;
 use Symfony\Component\HttpKernel\DependencyInjection\Extension;
 use Symfony\Component\DependencyInjection\Loader;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
 
 class GesdinetJWTRefreshTokenExtension extends Extension
 {
@@ -48,6 +51,12 @@ public function load(array $configs, ContainerBuilder $container): void
         $container->setParameter('gesdinet_jwt_refresh_token.return_expiration', $config['return_expiration']);
         $container->setParameter('gesdinet_jwt_refresh_token.return_expiration_parameter_name', $config['return_expiration_parameter_name']);
 
+        if ($config['logout_firewall']) {
+            $container->setDefinition('gesdinet_jwt_refresh_token.security.listener.logout.legacy_config', new ChildDefinition('gesdinet_jwt_refresh_token.security.listener.logout'))
+                ->addArgument(new Parameter('gesdinet_jwt_refresh_token.logout_firewall_context'))
+                ->addTag('kernel.event_listener', ['event' => LogoutEvent::class, 'method' => 'onLogout']);
+        }
+
         $refreshTokenClass = RefreshTokenEntity::class;
         $objectManager = 'doctrine.orm.entity_manager';
 
diff --git a/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactory.php b/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactory.php
index 01c2dbb2..603a4346 100644
--- a/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactory.php
+++ b/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactory.php
@@ -17,6 +17,7 @@
 use Symfony\Component\DependencyInjection\ContainerBuilder;
 use Symfony\Component\DependencyInjection\Parameter;
 use Symfony\Component\DependencyInjection\Reference;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
 
 final class RefreshTokenAuthenticatorFactory implements AuthenticatorFactoryInterface
 {
@@ -51,6 +52,10 @@ public function addConfiguration(NodeDefinition $builder): void
                 ->scalarNode('provider')->end()
                 ->scalarNode('success_handler')->end()
                 ->scalarNode('failure_handler')->end()
+                ->booleanNode('invalidate_token_on_logout')
+                    ->defaultFalse() // TODO - Enable by default in 2.0.
+                    ->info('When enabled, the refresh token will be invalided on logout.')
+                ->end()
                 /*
                 ->integerNode('ttl')
                     ->defaultNull()
@@ -87,6 +92,11 @@ public function createAuthenticator(ContainerBuilder $container, string $firewal
             ->replaceArgument(5, new Reference($this->createAuthenticationFailureHandler($container, $firewallName, $config)))
             ->replaceArgument(6, $options);
 
+        if ($config['invalidate_token_on_logout']) {
+            $container->setDefinition('gesdinet_jwt_refresh_token.security.listener.logout.'.$firewallName, new ChildDefinition('gesdinet_jwt_refresh_token.security.listener.logout'))
+                ->addTag('kernel.event_listener', ['event' => LogoutEvent::class, 'method' => 'onLogout', 'dispatcher' => 'security.event_dispatcher.'.$firewallName]);
+        }
+
         return $authenticatorId;
     }
 
diff --git a/EventListener/LogoutEventListener.php b/EventListener/LogoutEventListener.php
index cfd1df4c..f19c3a8c 100644
--- a/EventListener/LogoutEventListener.php
+++ b/EventListener/LogoutEventListener.php
@@ -22,14 +22,18 @@ class LogoutEventListener
     private ExtractorInterface $refreshTokenExtractor;
     private string $tokenParameterName;
     private array $cookieSettings;
-    private string $logout_firewall_context;
+
+    /**
+     * @deprecated to be removed in 2.0
+     */
+    private ?string $logoutFirewallContext;
 
     public function __construct(
         RefreshTokenManagerInterface $refreshTokenManager,
         ExtractorInterface $refreshTokenExtractor,
         string $tokenParameterName,
         array $cookieSettings,
-        string $logout_firewall_context
+        ?string $logoutFirewallContext = null
     ) {
         $this->refreshTokenManager = $refreshTokenManager;
         $this->refreshTokenExtractor = $refreshTokenExtractor;
@@ -43,15 +47,24 @@ public function __construct(
             'secure' => true,
             'remove_token_from_body' => true,
         ], $cookieSettings);
-        $this->logout_firewall_context = $logout_firewall_context;
+        $this->logoutFirewallContext = $logoutFirewallContext;
+
+        if (null !== $logoutFirewallContext) {
+            trigger_deprecation('gesdinet/jwt-refresh-token-bundle', '1.2', 'Passing the logout firewall context to "%s" is deprecated and will not be supported in 2.0.', self::class);
+        }
     }
 
     public function onLogout(LogoutEvent $event): void
     {
         $request = $event->getRequest();
-        $current_firewall_context = $request->attributes->get('_firewall_context');
 
-        if ($current_firewall_context !== $this->logout_firewall_context) {
+        /*
+         * This listener should only act in one of two conditions:
+         *
+         * 1) If the firewall context is not configured (this implies the listener is registered to the firewall specific event dispatcher)
+         * 2) (Deprecated) The request's firewall context matches the configured firewall context
+         */
+        if (null !== $this->logoutFirewallContext && $request->attributes->get('_firewall_context') !== $this->logoutFirewallContext) {
             return;
         }
 
diff --git a/Resources/config/services.php b/Resources/config/services.php
index ebfe6943..a632f6a2 100644
--- a/Resources/config/services.php
+++ b/Resources/config/services.php
@@ -170,16 +170,13 @@
         ])
         ->tag('console.command');
 
-    $services->set(LogoutEventListener::class)
+    $services->set('gesdinet_jwt_refresh_token.security.listener.logout')
+        ->abstract()
+        ->class(LogoutEventListener::class)
         ->args([
             new Reference('gesdinet.jwtrefreshtoken.refresh_token_manager'),
             new Reference('gesdinet.jwtrefreshtoken.request.extractor.chain'),
             new Parameter('gesdinet_jwt_refresh_token.token_parameter_name'),
             new Parameter('gesdinet_jwt_refresh_token.cookie'),
-            new Parameter('gesdinet_jwt_refresh_token.logout_firewall_context'),
-        ])
-        ->tag('kernel.event_listener', [
-            'event' => 'Symfony\Component\Security\Http\Event\LogoutEvent',
-            'method' => 'onLogout',
         ]);
 };
diff --git a/Tests/Functional/DependencyInjection/GesdinetJWTRefreshTokenExtensionTest.php b/Tests/Functional/DependencyInjection/GesdinetJWTRefreshTokenExtensionTest.php
index 2cb27aff..4bb00c20 100644
--- a/Tests/Functional/DependencyInjection/GesdinetJWTRefreshTokenExtensionTest.php
+++ b/Tests/Functional/DependencyInjection/GesdinetJWTRefreshTokenExtensionTest.php
@@ -6,6 +6,7 @@
 use Gesdinet\JWTRefreshTokenBundle\Document\RefreshToken as RefreshTokenDocument;
 use Gesdinet\JWTRefreshTokenBundle\Entity\RefreshToken as RefreshTokenEntity;
 use Matthias\SymfonyDependencyInjectionTest\PhpUnit\AbstractExtensionTestCase;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
 
 final class GesdinetJWTRefreshTokenExtensionTest extends AbstractExtensionTestCase
 {
@@ -40,10 +41,13 @@ public function test_container_is_loaded_with_default_configuration(): void
                 'remove_token_from_body' => true,
             ],
         );
+        $this->assertContainerBuilderHasParameter('gesdinet_jwt_refresh_token.logout_firewall_context', 'security.firewall.map.context.');
 
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.refresh_token.class', RefreshTokenEntity::class);
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.object_manager.id', 'doctrine.orm.entity_manager');
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.user_checker.id', 'security.user_checker');
+
+        $this->assertContainerBuilderNotHasService('gesdinet_jwt_refresh_token.security.listener.logout.legacy_config');
     }
 
     public function test_container_is_loaded_with_custom_configuration(): void
@@ -91,10 +95,13 @@ public function test_container_is_loaded_with_custom_configuration(): void
                 'remove_token_from_body' => true,
             ],
         );
+        $this->assertContainerBuilderHasParameter('gesdinet_jwt_refresh_token.logout_firewall_context', 'security.firewall.map.context.');
 
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.refresh_token.class', RefreshTokenDocument::class);
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.object_manager.id', 'doctrine_mongodb.odm.document_manager');
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.user_checker.id', 'my.user_checker');
+
+        $this->assertContainerBuilderNotHasService('gesdinet_jwt_refresh_token.security.listener.logout.legacy_config');
     }
 
     public function test_container_is_loaded_with_deprecated_parameters(): void
@@ -103,9 +110,13 @@ public function test_container_is_loaded_with_deprecated_parameters(): void
             'manager_type' => 'mongodb',
             'refresh_token_entity' => RefreshTokenDocument::class,
             'entity_manager' => 'doctrine_mongodb.odm.document_manager',
+            'logout_firewall' => 'api',
         ]);
 
+        $this->assertContainerBuilderHasParameter('gesdinet_jwt_refresh_token.logout_firewall_context', 'security.firewall.map.context.api');
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.refresh_token.class', RefreshTokenDocument::class);
         $this->assertContainerBuilderHasParameter('gesdinet.jwtrefreshtoken.object_manager.id', 'doctrine_mongodb.odm.document_manager');
+
+        $this->assertContainerBuilderHasServiceDefinitionWithTag('gesdinet_jwt_refresh_token.security.listener.logout.legacy_config', 'kernel.event_listener', ['event' => LogoutEvent::class, 'method' => 'onLogout']);
     }
 }
diff --git a/Tests/Functional/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactoryTest.php b/Tests/Functional/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactoryTest.php
index 3051f8bf..3d71ecd6 100644
--- a/Tests/Functional/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactoryTest.php
+++ b/Tests/Functional/DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactoryTest.php
@@ -7,6 +7,7 @@
 use Symfony\Component\DependencyInjection\ChildDefinition;
 use Symfony\Component\DependencyInjection\ContainerBuilder;
 use Symfony\Component\DependencyInjection\Reference;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
 use Symfony\Component\Security\Http\RememberMe\RememberMeHandlerInterface;
 
 final class RefreshTokenAuthenticatorFactoryTest extends TestCase
@@ -39,13 +40,16 @@ public function test_authenticator_service_is_created_with_default_configuration
         $this->factory->createAuthenticator(
             $this->container,
             'test',
-            [],
+            [
+                'invalidate_token_on_logout' => false,
+            ],
             'app.user_provider'
         );
 
         $this->assertTrue($this->container->hasDefinition('security.authenticator.refresh_jwt.test'));
         $this->assertTrue($this->container->hasDefinition('security.authentication.success_handler.test.refresh_jwt'));
         $this->assertTrue($this->container->hasDefinition('security.authentication.failure_handler.test.refresh_jwt'));
+        $this->assertFalse($this->container->hasDefinition('gesdinet_jwt_refresh_token.security.listener.logout.test'));
 
         /** @var ChildDefinition $successHandler */
         $successHandler = $this->container->getDefinition('security.authentication.success_handler.test.refresh_jwt');
@@ -56,6 +60,35 @@ public function test_authenticator_service_is_created_with_default_configuration
         $this->assertSame('gesdinet.jwtrefreshtoken.security.authentication.failure_handler', $failureHandler->getParent());
     }
 
+    public function test_authenticator_service_is_created_and_logout_listener_registered_to_firewall_dispatcher(): void
+    {
+        $this->factory->createAuthenticator(
+            $this->container,
+            'test',
+            [
+                'invalidate_token_on_logout' => true,
+            ],
+            'app.user_provider'
+        );
+
+        $this->assertTrue($this->container->hasDefinition('security.authenticator.refresh_jwt.test'));
+        $this->assertTrue($this->container->hasDefinition('security.authentication.success_handler.test.refresh_jwt'));
+        $this->assertTrue($this->container->hasDefinition('security.authentication.failure_handler.test.refresh_jwt'));
+        $this->assertTrue($this->container->hasDefinition('gesdinet_jwt_refresh_token.security.listener.logout.test'));
+
+        /** @var ChildDefinition $successHandler */
+        $successHandler = $this->container->getDefinition('security.authentication.success_handler.test.refresh_jwt');
+        $this->assertSame('gesdinet.jwtrefreshtoken.security.authentication.success_handler', $successHandler->getParent());
+
+        /** @var ChildDefinition $failureHandler */
+        $failureHandler = $this->container->getDefinition('security.authentication.failure_handler.test.refresh_jwt');
+        $this->assertSame('gesdinet.jwtrefreshtoken.security.authentication.failure_handler', $failureHandler->getParent());
+
+        /** @var ChildDefinition $logoutListener */
+        $logoutListener = $this->container->getDefinition('gesdinet_jwt_refresh_token.security.listener.logout.test');
+        $this->assertSame(['event' => LogoutEvent::class, 'method' => 'onLogout', 'dispatcher' => 'security.event_dispatcher.test'], $logoutListener->getTags()['kernel.event_listener'][0]);
+    }
+
     public function test_authenticator_service_is_created_with_custom_handlers(): void
     {
         $this->factory->createAuthenticator(
@@ -64,6 +97,7 @@ public function test_authenticator_service_is_created_with_custom_handlers(): vo
             [
                 'success_handler' => 'app.security.authentication.success_handler',
                 'failure_handler' => 'app.security.authentication.failure_handler',
+                'invalidate_token_on_logout' => false,
             ],
             'app.user_provider'
         );
@@ -71,6 +105,7 @@ public function test_authenticator_service_is_created_with_custom_handlers(): vo
         $this->assertTrue($this->container->hasDefinition('security.authenticator.refresh_jwt.test'));
         $this->assertTrue($this->container->hasDefinition('security.authentication.success_handler.test.refresh_jwt'));
         $this->assertTrue($this->container->hasDefinition('security.authentication.failure_handler.test.refresh_jwt'));
+        $this->assertFalse($this->container->hasDefinition('gesdinet_jwt_refresh_token.security.listener.logout.test'));
 
         /** @var ChildDefinition $successHandler */
         $successHandler = $this->container->getDefinition('security.authentication.success_handler.test.refresh_jwt');
diff --git a/Tests/Unit/EventListener/LogoutEventListenerTest.php b/Tests/Unit/EventListener/LogoutEventListenerTest.php
new file mode 100644
index 00000000..b7e6c394
--- /dev/null
+++ b/Tests/Unit/EventListener/LogoutEventListenerTest.php
@@ -0,0 +1,307 @@
+<?php
+
+namespace Gesdinet\JWTRefreshTokenBundle\Tests\Unit\EventListener;
+
+use Gesdinet\JWTRefreshTokenBundle\EventListener\LogoutEventListener;
+use Gesdinet\JWTRefreshTokenBundle\Model\RefreshTokenInterface;
+use Gesdinet\JWTRefreshTokenBundle\Model\RefreshTokenManagerInterface;
+use Gesdinet\JWTRefreshTokenBundle\Request\Extractor\ExtractorInterface;
+use PHPUnit\Framework\MockObject\MockObject;
+use PHPUnit\Framework\TestCase;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Security\Http\Event\LogoutEvent;
+
+final class LogoutEventListenerTest extends TestCase
+{
+    const TOKEN_PARAMETER_NAME = 'refresh_token';
+
+    /**
+     * @var RefreshTokenManagerInterface|MockObject
+     */
+    private $refreshTokenManager;
+
+    /**
+     * @var ExtractorInterface|MockObject
+     */
+    private $extractor;
+
+    private LogoutEventListener $eventListener;
+
+    public static function setUpBeforeClass(): void
+    {
+        if (!class_exists(LogoutEvent::class)) {
+            self::markTestSkipped('Only applies to Symfony 5.3+');
+        }
+    }
+
+    protected function setUp(): void
+    {
+        $this->refreshTokenManager = $this->createMock(RefreshTokenManagerInterface::class);
+        $this->extractor = $this->createMock(ExtractorInterface::class);
+
+        $this->eventListener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            []
+        );
+    }
+
+    public function testInvalidatesTokenAndClearsCookieFromResponse(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->once())
+            ->method('getRefreshToken')
+            ->with($request, self::TOKEN_PARAMETER_NAME)
+            ->willReturn($refreshTokenString);
+
+        /** @var RefreshTokenInterface|MockObject $refreshToken */
+        $refreshToken = $this->createMock(RefreshTokenInterface::class);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('get')
+            ->willReturn($refreshToken);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('delete')
+            ->with($this->equalTo($refreshToken));
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => true,
+            ]
+        );
+        $listener->onLogout($event);
+
+        /** @var JsonResponse|null $response */
+        $response = $event->getResponse();
+
+        $this->assertNotNull($response);
+
+        $this->assertSame('{"code":200,"message":"The supplied refresh_token has been invalidated."}', $response->getContent());
+        $this->assertSame(Response::HTTP_OK, $response->getStatusCode());
+    }
+
+    public function testInvalidatesTokenAndDoesNotClearCookieFromResponseWhenCookieSupportIsDisabled(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->once())
+            ->method('getRefreshToken')
+            ->with($request, self::TOKEN_PARAMETER_NAME)
+            ->willReturn($refreshTokenString);
+
+        /** @var RefreshTokenInterface|MockObject $refreshToken */
+        $refreshToken = $this->createMock(RefreshTokenInterface::class);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('get')
+            ->willReturn($refreshToken);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('delete')
+            ->with($this->equalTo($refreshToken));
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => false,
+            ]
+        );
+        $listener->onLogout($event);
+
+        /** @var JsonResponse|null $response */
+        $response = $event->getResponse();
+
+        $this->assertNotNull($response);
+
+        $this->assertSame('{"code":200,"message":"The supplied refresh_token has been invalidated."}', $response->getContent());
+        $this->assertSame(Response::HTTP_OK, $response->getStatusCode());
+    }
+
+    public function testCreatesASuccessResponseWhenTheRefreshTokenIsAlreadyInvalid(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->once())
+            ->method('getRefreshToken')
+            ->with($request, self::TOKEN_PARAMETER_NAME)
+            ->willReturn($refreshTokenString);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('get')
+            ->willReturn(null);
+
+        $this->refreshTokenManager
+            ->expects($this->never())
+            ->method('delete');
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => false,
+            ]
+        );
+        $listener->onLogout($event);
+
+        /** @var JsonResponse|null $response */
+        $response = $event->getResponse();
+
+        $this->assertNotNull($response);
+
+        $this->assertSame('{"code":200,"message":"The supplied refresh_token is already invalid."}', $response->getContent());
+        $this->assertSame(Response::HTTP_OK, $response->getStatusCode());
+    }
+
+    public function testCreatesAnErrorResponseWhenTheRefreshTokenIsNotInTheRequest(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->once())
+            ->method('getRefreshToken')
+            ->with($request, self::TOKEN_PARAMETER_NAME)
+            ->willReturn(null);
+
+        $this->refreshTokenManager
+            ->expects($this->never())
+            ->method('get');
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => false,
+            ]
+        );
+        $listener->onLogout($event);
+
+        /** @var JsonResponse|null $response */
+        $response = $event->getResponse();
+
+        $this->assertNotNull($response);
+
+        $this->assertSame('{"code":400,"message":"No refresh_token found."}', $response->getContent());
+        $this->assertSame(Response::HTTP_BAD_REQUEST, $response->getStatusCode());
+    }
+
+    /**
+     * @group legacy
+     */
+    public function testInvalidatesTokenAndClearsCookieFromResponseWhenFirewallContextIsConfigured(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+        $request->attributes->set('_firewall_context', 'security.firewall.map.context.api');
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->once())
+            ->method('getRefreshToken')
+            ->with($request, self::TOKEN_PARAMETER_NAME)
+            ->willReturn($refreshTokenString);
+
+        /** @var RefreshTokenInterface|MockObject $refreshToken */
+        $refreshToken = $this->createMock(RefreshTokenInterface::class);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('get')
+            ->willReturn($refreshToken);
+
+        $this->refreshTokenManager
+            ->expects($this->once())
+            ->method('delete')
+            ->with($this->equalTo($refreshToken));
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => true,
+            ],
+            'security.firewall.map.context.api'
+        );
+        $listener->onLogout($event);
+
+        /** @var JsonResponse|null $response */
+        $response = $event->getResponse();
+
+        $this->assertNotNull($response);
+
+        $this->assertSame('{"code":200,"message":"The supplied refresh_token has been invalidated."}', $response->getContent());
+        $this->assertSame(Response::HTTP_OK, $response->getStatusCode());
+    }
+
+    /**
+     * @group legacy
+     */
+    public function testDoesNotInvalidateTokenWhenEventIsEmittedFromUnsupportedFirewallContext(): void
+    {
+        $refreshTokenString = 'thepreviouslyissuedrefreshtoken';
+        $refreshTokenArray = [self::TOKEN_PARAMETER_NAME => $refreshTokenString];
+        $request = Request::create('/', 'POST', $refreshTokenArray);
+        $request->attributes->set('_firewall_context', 'security.firewall.map.context.api');
+
+        $event = new LogoutEvent($request, null);
+
+        $this->extractor
+            ->expects($this->never())
+            ->method('getRefreshToken');
+
+        $this->refreshTokenManager
+            ->expects($this->never())
+            ->method('get');
+
+        $listener = new LogoutEventListener(
+            $this->refreshTokenManager,
+            $this->extractor,
+            self::TOKEN_PARAMETER_NAME,
+            [
+                'enabled' => true,
+            ],
+            'security.firewall.map.context.main'
+        );
+        $listener->onLogout($event);
+
+        $this->assertNull($event->getResponse());
+    }
+}