org.springframework.vault.authentication

Class LifecycleAwareSessionManager

java.lang.Object

org.springframework.vault.authentication.LifecycleAwareSessionManager

All Implemented Interfaces:

DisposableBean, SessionManager

public class LifecycleAwareSessionManager
extends Object
implements SessionManager, DisposableBean

Lifecycle-aware Session Manager. This SessionManager obtains tokens from a ClientAuthentication upon request. Tokens are renewed asynchronously if a token has a lease duration. This happens 5 seconds before the token expires, see REFRESH_PERIOD_BEFORE_EXPIRY.

This SessionManager also implements DisposableBean to revoke the LoginToken once it's not required anymore. Token revocation will stop regular token refresh.

If Token renewal runs into a client-side error, it assumes the token was revoked/expired and discards the token state so the next attempt will lead to another login attempt.

Author:

Mark Paluch

See Also:

LoginToken, SessionManager, AsyncTaskExecutor

Field Summary

Fields

Modifier and Type	Field and Description
static int	REFRESH_PERIOD_BEFORE_EXPIRY

Constructor Summary

Constructors

Constructor and Description
LifecycleAwareSessionManager(ClientAuthentication clientAuthentication, AsyncTaskExecutor taskExecutor, VaultClient vaultClient) Create a LifecycleAwareSessionManager given ClientAuthentication, AsyncTaskExecutor and VaultClient.

Method Summary

Modifier and Type	Method and Description
void	destroy()
VaultToken	getSessionToken() Obtain a session token.
protected boolean	renewToken() Performs a token refresh.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

REFRESH_PERIOD_BEFORE_EXPIRY

public static final int REFRESH_PERIOD_BEFORE_EXPIRY

See Also:

Constant Field Values

Constructor Detail

LifecycleAwareSessionManager

public LifecycleAwareSessionManager(ClientAuthentication clientAuthentication,
                                    AsyncTaskExecutor taskExecutor,
                                    VaultClient vaultClient)

Create a LifecycleAwareSessionManager given ClientAuthentication, AsyncTaskExecutor and VaultClient.

Parameters:

clientAuthentication - must not be null.

taskExecutor - must not be null.

vaultClient - must not be null.

Method Detail

destroy

public void destroy()

Specified by:

destroy in interface DisposableBean

renewToken

protected boolean renewToken()

Performs a token refresh. Creates a new token if no token was obtained before. If a token was obtained before, it uses self-renewal to renew the current token. Client-side errors (like permission denied) indicate the token cannot be renewed because it's expired or simply not found.

Returns:

true if the refresh was successful. false if a new token was obtained or refresh failed.

getSessionToken

public VaultToken getSessionToken()

Description copied from interface: SessionManager

Obtain a session token.

Specified by:

getSessionToken in interface SessionManager

Returns:

a session token.