Kim Pepper
--- a/core/modules/user/src/UserSessionFinalizer.php 0 → 100644
+++ b/core/modules/user/src/UserSessionFinalizer.php 0 → 100644
+    $this->moduleHandler->invokeAll('user_login', [$user]);
+  }
+
+  /**
+   * Logs the current user out.
+   */
+  public function finalizeLogout(): void {
+    $this->logger->info('Session closed for %name.', ['%name' => $this->accountProxy->getAccountName()]);
+
+    $this->moduleHandler->invokeAll('user_logout', [$this->accountProxy]);
+
+    // Destroy the current session, and reset $user to the anonymous user.
+    // Note: In Symfony the session is intended to be destroyed with
+    // Session::invalidate(). Regrettably this method is currently broken and
+    // may lead to the creation of spurious session records in the database.
+    // @see https://github.com/symfony/symfony/issues/12375
--- a/core/misc/cspell/dictionary.txt
+++ b/core/misc/cspell/dictionary.txt
 filemime
 filesystems
 filetransfer
+finalizer
--- a/core/modules/user/src/UserSessionFinalizer.php 0 → 100644
+++ b/core/modules/user/src/UserSessionFinalizer.php 0 → 100644
+   * Creates a new UserSessionFinalizer.
+   */
+  public function __construct(
+    protected AccountProxyInterface $accountProxy,
+    protected RequestStack $requestStack,
+    protected SessionManagerInterface $sessionManager,
+    protected EntityTypeManagerInterface $entityTypeManager,
+    protected ModuleHandlerInterface $moduleHandler,
+    protected LoggerInterface $logger,
+    protected TimeInterface $time,
+  ) {}
+
+  /**
+   * Finalizes the login process and logs in a user.
+   *
+   * The function logs in the user, records a watchdog message about the new
-   * The function logs in the user, records a watchdog message about the new
+   * This method logs in the user, records a watchdog message about the new
--- a/core/modules/user/src/UserSessionFinalize.php 0 → 100644
+++ b/core/modules/user/src/UserSessionFinalize.php 0 → 100644
+
+/**
+ * Finalize user sessions.
+ */
+final class UserSessionFinalize {
+
+  /**
+   * Creates a new UserSessionFinalize service.
+   */
+  public function __construct(
+    protected AccountProxyInterface $accountProxy,
+    protected RequestStack $requestStack,
+    protected SessionManagerInterface $sessionManager,
+    protected EntityTypeManagerInterface $entityTypeManager,
+    protected ModuleHandlerInterface $moduleHandler,
+    protected LoggerInterface $logger,