@GET @ApiIgnore // until documented
  @Produces("text/plain")
  public Response performLogout(@Context HttpServletRequest servletRequest) {
    auditLog(servletRequest);
    SecurityContextHolder.clearContext();
    servletRequest.getSession().invalidate();
    return Response.status(Response.Status.OK).build();
  }
Service performing logout of current user
ambari-server/src/main/java/org/apache/ambari/server/api/services/LogoutService.java