public boolean destroyGuacamoleSession(String authToken) {

        // Remove corresponding GuacamoleSession if the token is valid
        GuacamoleSession session = tokenSessionMap.remove(authToken);
        if (session == null)
            return false;

        // Invalidate the removed session
        session.invalidate();
        return true;

    }
Invalidates a specific authentication token and its corresponding
Guacamole session, effectively logging out the associated user. If the
authentication token is not valid, this function has no effect.

@param authToken
    The token being invalidated.

@return
    true if the given authentication token was valid and the
    corresponding Guacamole session was destroyed, false if the given
    authentication token was not valid and no action was taken.
guacamole/src/main/java/org/apache/guacamole/rest/auth/AuthenticationService.java