public class ConcurrentSessionFilter extends GenericFilterBean
This filter performs two functions. First, it calls
SessionRegistry.refreshLastRequest(String)
for each request so that registered sessions always have a correct "last update"
date/time. Second, it retrieves a
SessionInformation
from the
SessionRegistry
for each request and checks if the session has been marked
as expired. If it has been marked as expired, the configured logout handlers will be
called (as happens with
LogoutFilter
), typically
to invalidate the session. To handle the expired session a call to the SessionInformationExpiredStrategy
is made.
The session invalidation will cause an
HttpSessionDestroyedEvent
to be
published via the
HttpSessionEventPublisher
registered
in web.xml
.
logger
Constructor and Description |
---|
ConcurrentSessionFilter(SessionRegistry sessionRegistry) |
ConcurrentSessionFilter(SessionRegistry sessionRegistry,
SessionInformationExpiredStrategy sessionInformationExpiredStrategy) |
ConcurrentSessionFilter(SessionRegistry sessionRegistry,
String expiredUrl)
Deprecated.
|
Modifier and Type | Method and Description |
---|---|
void |
afterPropertiesSet() |
protected String |
determineExpiredUrl(javax.servlet.http.HttpServletRequest request,
SessionInformation info)
Deprecated.
|
void |
doFilter(javax.servlet.ServletRequest req,
javax.servlet.ServletResponse res,
javax.servlet.FilterChain chain) |
void |
setLogoutHandlers(LogoutHandler[] handlers) |
void |
setRedirectStrategy(RedirectStrategy redirectStrategy)
Deprecated.
|
addRequiredProperty, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext
public ConcurrentSessionFilter(SessionRegistry sessionRegistry)
@Deprecated public ConcurrentSessionFilter(SessionRegistry sessionRegistry, String expiredUrl)
ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)
with SimpleRedirectSessionInformationExpiredStrategy
instead.sessionRegistry
- the SessionRegistry to useexpiredUrl
- the URL to redirect topublic ConcurrentSessionFilter(SessionRegistry sessionRegistry, SessionInformationExpiredStrategy sessionInformationExpiredStrategy)
public void afterPropertiesSet()
afterPropertiesSet
in interface InitializingBean
afterPropertiesSet
in class GenericFilterBean
public void doFilter(javax.servlet.ServletRequest req, javax.servlet.ServletResponse res, javax.servlet.FilterChain chain) throws IOException, javax.servlet.ServletException
IOException
javax.servlet.ServletException
protected String determineExpiredUrl(javax.servlet.http.HttpServletRequest request, SessionInformation info)
ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)
instead.request
- the HttpServletRequestinfo
- the SessionInformation
public void setLogoutHandlers(LogoutHandler[] handlers)
public void setRedirectStrategy(RedirectStrategy redirectStrategy)
ConcurrentSessionFilter(SessionRegistry, SessionInformationExpiredStrategy)
instead.RedirectStrategy
used with ConcurrentSessionFilter(SessionRegistry, String)
redirectStrategy
- the RedirectStrategy
to use