Package org.springframework.security.oauth2.client.oidc.session

Interface OidcSessionRegistry

All Known Implementing Classes:
InMemoryOidcSessionRegistry
public interface OidcSessionRegistry
A registry to record the tie between the OIDC Provider session and the Client session. This is handy when a provider makes a logout request that indicates the OIDC Provider session or the End User.
Since:
6.2
See Also:

  • Method Details

    • saveSessionInformation

      void saveSessionInformation(OidcSessionInformation info)
      Register a OIDC Provider session with the provided client session. Generally speaking, the client session should be the session tied to the current login.
      Parameters:
      info - the OidcSessionInformation to use

    • removeSessionInformation

      OidcSessionInformation removeSessionInformation(String clientSessionId)
      Deregister the OIDC Provider session tied to the provided client session. Generally speaking, the client session should be the session tied to the current logout.
      Parameters:
      clientSessionId - the client session
      Returns:
      any found OidcSessionInformation, could be null

    • removeSessionInformation

      Iterable<OidcSessionInformation> removeSessionInformation(OidcLogoutToken logoutToken)
      Deregister the OIDC Provider sessions referenced by the provided OIDC Logout Token by its session id or its subject. Note that the issuer and audience should also match the corresponding values found in each OidcSessionInformation returned.
      Parameters:
      logoutToken - the OidcLogoutToken
      Returns:
      any found OidcSessionInformations, could be empty