Package pl.edu.icm.unity.engine.api.session

Interface LoginToHttpSessionBinder

public interface LoginToHttpSessionBinder

Maintains an association of Unity's LoginSessions with HttpSessions. The main purpose is to invalidate the latter when Unity session is expired. The implementation also takes care about memory consumption: whenever a HttpSession is expired it is removed from the registry.

Thread safe.

Author:

K. Benedyczak

Field Summary

Fields

Modifier and Type	Field	Description
static final String	SELF_REFERENCING_ATTRIBUTE
static final String	USER_SESSION_KEY	Under this key the LoginSession id is stored in the HTTP session.

Method Summary

Modifier and Type	Method	Description
void	bindHttpSession(jakarta.servlet.http.HttpSession session, LoginSession owning)
void	removeLoginSession(String toRemove, boolean soft)

Field Details

USER_SESSION_KEY

static final String USER_SESSION_KEY

Under this key the LoginSession id is stored in the HTTP session.

See Also:

• Constant Field Values

SELF_REFERENCING_ATTRIBUTE

static final String SELF_REFERENCING_ATTRIBUTE

See Also:

• Constant Field Values

Method Details

removeLoginSession

void removeLoginSession(String toRemove,
 boolean soft)

Parameters:

toRemove -

soft - if true then only the login data is removed from the HTTP session. Otherwise the whole session is invalidated

bindHttpSession

void bindHttpSession(jakarta.servlet.http.HttpSession session,
 LoginSession owning)