org.cyclos.impl.access

Interface SessionHandler

public interface SessionHandler

Handler for user sessions, containing methods to manage them

Author:

luis

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	SessionHandler.UserCheckResult

Method Summary

Modifier and Type	Method and Description
AccessClient	checkAccessClientAccess(boolean forLogin, Network network, java.lang.String channelName, java.lang.String remoteAddress, java.lang.String accessClientToken) Checks the access for an user for a channel / network using the specified access client token.
SessionHandler.UserCheckResult	checkUserAccess(boolean forLogin, boolean allowIfPasswordExpired, Network network, java.lang.String channelName, java.lang.String remoteAddress, UserLocatorVO locator, java.lang.String password) Checks the access for an user for a channel / network
Session	create(Channel channel, java.lang.String remoteAddress, BasicUser user, AccessClient accessClient) Creates a new session for the given user using an access client.
Session	create(Channel channel, java.lang.String remoteAddress, BasicUser user, PrincipalType principalType, java.lang.String principal) Creates a new session for the given user
Session	create(Channel channel, java.lang.String remoteAddress, BasicUser user, Token token) Creates a new session for the given user using a token.
Session	findByToken(java.lang.String token) Returns a session by token
Session	getIfValid(java.lang.String remoteAddress, java.lang.String sessionToken) Returns an active session by remote address and session token.
TimeInterval	getSessionTimeout(Session session) Returns the timeout for a given session
void	invalidate(java.lang.String remoteAddress, java.lang.String sessionToken) Invalidates the session with the given token, under the given remote address
Session	login(java.lang.String channelName, java.lang.String remoteAddress, UserLocatorVO locator, java.lang.String password) Performs a login.
int	purgeExpired() Purges all expired sessions.
int	remove(java.util.Collection<java.lang.String> tokens) Removes (both from the shared map and from the database) sessions with the given tokens, returning the number of actually deleted sessions
java.lang.String	replace(Session session) Replaces an existing session token
void	updateTimeout(java.lang.String sessionToken, TimeInterval interval) Updates the expiration time of the session with the given token

Method Detail

checkAccessClientAccess

AccessClient checkAccessClientAccess(boolean forLogin,
                                     Network network,
                                     java.lang.String channelName,
                                     java.lang.String remoteAddress,
                                     java.lang.String accessClientToken)

Checks the access for an user for a channel / network using the specified access client token.

checkUserAccess

SessionHandler.UserCheckResult checkUserAccess(boolean forLogin,
                                               boolean allowIfPasswordExpired,
                                               Network network,
                                               java.lang.String channelName,
                                               java.lang.String remoteAddress,
                                               UserLocatorVO locator,
                                               java.lang.String password)

Checks the access for an user for a channel / network

create

Session create(Channel channel,
               java.lang.String remoteAddress,
               BasicUser user,
               AccessClient accessClient)

Creates a new session for the given user using an access client.

create

Session create(Channel channel,
               java.lang.String remoteAddress,
               BasicUser user,
               PrincipalType principalType,
               java.lang.String principal)

Creates a new session for the given user

create

Session create(Channel channel,
               java.lang.String remoteAddress,
               BasicUser user,
               Token token)

Creates a new session for the given user using a token.

findByToken

Session findByToken(java.lang.String token)
             throws EntityNotFoundException

Returns a session by token

Throws:

EntityNotFoundException

getIfValid

Session getIfValid(java.lang.String remoteAddress,
                   java.lang.String sessionToken)

Returns an active session by remote address and session token. If the session has expired or doesn't match the remote address, returns null

getSessionTimeout

TimeInterval getSessionTimeout(Session session)

Returns the timeout for a given session

invalidate

void invalidate(java.lang.String remoteAddress,
                java.lang.String sessionToken)

Invalidates the session with the given token, under the given remote address

login

Session login(java.lang.String channelName,
              java.lang.String remoteAddress,
              UserLocatorVO locator,
              java.lang.String password)
       throws FrameworkException,
              LoginException,
              RemoteAddressBlockedException

Performs a login. Checks the remote address blocking by exceeding invalid username attempts, and creates a session

Throws:

FrameworkException

LoginException

RemoteAddressBlockedException

purgeExpired

int purgeExpired()

Purges all expired sessions. Should run outside a transaction.

remove

int remove(java.util.Collection<java.lang.String> tokens)

Removes (both from the shared map and from the database) sessions with the given tokens, returning the number of actually deleted sessions

replace

java.lang.String replace(Session session)

Replaces an existing session token

updateTimeout

void updateTimeout(java.lang.String sessionToken,
                   TimeInterval interval)

Updates the expiration time of the session with the given token