Package com.predic8.membrane.core.interceptor.session

Class InMemorySessionManager

java.lang.Object

com.predic8.membrane.core.interceptor.session.SessionManager

com.predic8.membrane.core.interceptor.session.InMemorySessionManager

public class InMemorySessionManager
extends SessionManager

Field Summary

Fields

Modifier and Type	Field	Description
protected String	cookieNamePrefix

Fields inherited from class com.predic8.membrane.core.interceptor.session.SessionManager

secure, SESSION, SESSION_COOKIE_ORIGINAL, SESSION_VALUE_SEPARATOR, sessionCookie, ttlExpiryRefreshOnAccess, usernameKeyName, VALUE_TO_EXPIRE_SESSION_IN_BROWSER

Constructor Summary

Constructors

Constructor	Description
InMemorySessionManager()

Method Summary

Modifier and Type	Method	Description
protected boolean	cookieRenewalNeeded(String originalCookie)	Gets called when session was not modified.
protected Map<String,Object>	cookieValueToAttributes(String cookie)	Transforms a cookie value into its attributes.
protected Map<Session,String>	getCookieValues(Session... session)	Get the String identifier of the sessions to be used as cookie value.
List<String>	getInvalidCookies(Exchange exc, String validCookie)	Get all cookies String representations from the request that are not valid anymore, e.g.
void	init(Router router)
protected boolean	isValidCookieForThisSessionManager(String cookie)	Gets called for every cookie value.
void	removeSession(Exchange exc)

Methods inherited from class com.predic8.membrane.core.interceptor.session.SessionManager

createCookieAttributes, createInvalidationAttributes, getAllCookieKeys, getCookieHeader, getCookieHeaderFields, getCookies, getDomain, getExpiresAfterSeconds, getIssuer, getSameSite, getSession, getSessionInternal, isHttpOnly, isSecure, isSessionCookie, isTtlExpiryRefreshOnAccess, postProcess, setDomain, setExpiresAfterSeconds, setHttpOnly, setIssuer, setSameSite, setSecure, setSessionCookie, setTtlExpiryRefreshOnAccess

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

cookieNamePrefix

protected String cookieNamePrefix

Constructor Details

InMemorySessionManager

public InMemorySessionManager()

Method Details

init

public void init(Router router)
          throws Exception

Specified by:

init in class SessionManager

Throws:

Exception

cookieValueToAttributes

protected Map<String,Object> cookieValueToAttributes(String cookie)

Description copied from class: SessionManager

Transforms a cookie value into its attributes. The cookie should be assumed valid as @isValidCookieForThisSessionManager was called beforehand

Specified by:

cookieValueToAttributes in class SessionManager

getCookieValues

protected Map<Session,String> getCookieValues(Session... session)

Description copied from class: SessionManager

Get the String identifier of the sessions to be used as cookie value.

Specified by:

getCookieValues in class SessionManager

getInvalidCookies

public List<String> getInvalidCookies(Exchange exc,
 String validCookie)

Description copied from class: SessionManager

Get all cookies String representations from the request that are not valid anymore, e.g. because the cookie is a self contained value and has changed or expired (e.g. jwt). Should return cookie values in the form of key=value.

Specified by:

getInvalidCookies in class SessionManager

validCookie - is the cookie value representation of the currently active session. Is key=value

isValidCookieForThisSessionManager

protected boolean isValidCookieForThisSessionManager(String cookie)

Description copied from class: SessionManager

Gets called for every cookie value. Returns if the cookie value is valid and managed by this manager instance, e.g. jwt session manager checks if the cookie is a jwt, if it has the correct issuer, if it is not expired and if the signature is valid. Cookie is in format key=value

Specified by:

isValidCookieForThisSessionManager in class SessionManager

cookieRenewalNeeded

protected boolean cookieRenewalNeeded(String originalCookie)

Description copied from class: SessionManager

Gets called when session was not modified. Should check, if session needs to be renewed (e.g. jwt expiration).

Specified by:

cookieRenewalNeeded in class SessionManager

Parameters:

originalCookie - the original cookie from which the session was created (can be different from current session)

Returns:

removeSession

public void removeSession(Exchange exc)

Overrides:

removeSession in class SessionManager