Package org.springframework.security.oauth2.client.oidc.session

Class InMemoryOidcSessionRegistry

java.lang.Object

org.springframework.security.oauth2.client.oidc.session.InMemoryOidcSessionRegistry

All Implemented Interfaces:

OidcSessionRegistry

public final class InMemoryOidcSessionRegistry
extends Object
implements OidcSessionRegistry

An in-memory implementation of OidcSessionRegistry

Since:

6.2

Constructor Summary

Constructors

Constructor	Description
InMemoryOidcSessionRegistry()

Method Summary

Modifier and Type	Method	Description
OidcSessionInformation	removeSessionInformation(String clientSessionId)	Deregister the OIDC Provider session tied to the provided client session.
Iterable<OidcSessionInformation>	removeSessionInformation(OidcLogoutToken token)	Deregister the OIDC Provider sessions referenced by the provided OIDC Logout Token by its session id or its subject.
void	saveSessionInformation(OidcSessionInformation info)	Register a OIDC Provider session with the provided client session.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

InMemoryOidcSessionRegistry

public InMemoryOidcSessionRegistry()

Method Details

saveSessionInformation

public void saveSessionInformation(OidcSessionInformation info)

Description copied from interface: OidcSessionRegistry

Register a OIDC Provider session with the provided client session. Generally speaking, the client session should be the session tied to the current login.

Specified by:

saveSessionInformation in interface OidcSessionRegistry

Parameters:

info - the OidcSessionInformation to use

removeSessionInformation

public OidcSessionInformation removeSessionInformation(String clientSessionId)

Description copied from interface: OidcSessionRegistry

Deregister the OIDC Provider session tied to the provided client session. Generally speaking, the client session should be the session tied to the current logout.

Specified by:

removeSessionInformation in interface OidcSessionRegistry

Parameters:

clientSessionId - the client session

Returns:

any found OidcSessionInformation, could be null

removeSessionInformation

public Iterable<OidcSessionInformation> removeSessionInformation(OidcLogoutToken token)

Description copied from interface: OidcSessionRegistry

Deregister the OIDC Provider sessions referenced by the provided OIDC Logout Token by its session id or its subject. Note that the issuer and audience should also match the corresponding values found in each OidcSessionInformation returned.

Specified by:

removeSessionInformation in interface OidcSessionRegistry

Parameters:

token - the OidcLogoutToken

Returns:

any found OidcSessionInformations, could be empty