org.springframework.session.security

Class SpringSessionBackedSessionRegistry

java.lang.Object

org.springframework.session.security.SpringSessionBackedSessionRegistry

All Implemented Interfaces:

org.springframework.security.core.session.SessionRegistry

public class SpringSessionBackedSessionRegistry
extends java.lang.Object
implements org.springframework.security.core.session.SessionRegistry

A SessionRegistry that retrieves session information from Spring Session, rather than maintaining it itself. This allows concurrent session management with Spring Security in a clustered environment.

Relies on being able to derive the same String-based representation of the principal given to getAllSessions(Object, boolean) as used by Spring Session in order to look up the user's sessions.

Does not support getAllPrincipals(), since that information is not available.

Since:

1.3

Author:

Joris Kuipers

Constructor Summary

Constructors

Constructor and Description
SpringSessionBackedSessionRegistry(FindByIndexNameSessionRepository<ExpiringSession> sessionRepository)

Method Summary

Modifier and Type	Method and Description
java.util.List<java.lang.Object>	getAllPrincipals()
java.util.List<org.springframework.security.core.session.SessionInformation>	getAllSessions(java.lang.Object principal, boolean includeExpiredSessions)
org.springframework.security.core.session.SessionInformation	getSessionInformation(java.lang.String sessionId)
protected java.lang.String	name(java.lang.Object principal) Derives a String name for the given principal.
void	refreshLastRequest(java.lang.String sessionId)
void	registerNewSession(java.lang.String sessionId, java.lang.Object principal)
void	removeSessionInformation(java.lang.String sessionId)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SpringSessionBackedSessionRegistry

public SpringSessionBackedSessionRegistry(FindByIndexNameSessionRepository<ExpiringSession> sessionRepository)

Method Detail

getAllPrincipals

public java.util.List<java.lang.Object> getAllPrincipals()

Specified by:

getAllPrincipals in interface org.springframework.security.core.session.SessionRegistry

getAllSessions

public java.util.List<org.springframework.security.core.session.SessionInformation> getAllSessions(java.lang.Object principal,
                                                                                                   boolean includeExpiredSessions)

Specified by:

getAllSessions in interface org.springframework.security.core.session.SessionRegistry

getSessionInformation

public org.springframework.security.core.session.SessionInformation getSessionInformation(java.lang.String sessionId)

Specified by:

getSessionInformation in interface org.springframework.security.core.session.SessionRegistry

refreshLastRequest

public void refreshLastRequest(java.lang.String sessionId)

Specified by:

refreshLastRequest in interface org.springframework.security.core.session.SessionRegistry

registerNewSession

public void registerNewSession(java.lang.String sessionId,
                               java.lang.Object principal)

Specified by:

registerNewSession in interface org.springframework.security.core.session.SessionRegistry

removeSessionInformation

public void removeSessionInformation(java.lang.String sessionId)

Specified by:

removeSessionInformation in interface org.springframework.security.core.session.SessionRegistry

name

protected java.lang.String name(java.lang.Object principal)

Derives a String name for the given principal.

Parameters:

principal - as provided by Spring Security

Returns:

name of the principal, or its toString() representation if no name could be derived