Package io.jmix.sessions.resolver

Class OAuth2AndCookieSessionIdResolver

java.lang.Object

io.jmix.sessions.resolver.OAuth2AndCookieSessionIdResolver

All Implemented Interfaces:

org.springframework.session.web.http.HttpSessionIdResolver

public class OAuth2AndCookieSessionIdResolver
extends Object
implements org.springframework.session.web.http.HttpSessionIdResolver

Uses oauth2 access token and cookies to search session id.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCESS_TOKEN
protected org.springframework.session.web.http.HttpSessionIdResolver	cookieHttpSessionIdResolver
protected org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService	oAuth2AuthorizationService
static final String	SESSION_ID
protected org.springframework.beans.factory.ObjectProvider<SessionData>	sessionDataProvider

Constructor Summary

Constructors

Constructor	Description
OAuth2AndCookieSessionIdResolver()

Method Summary

Modifier and Type	Method	Description
protected void	expireOAuth2Session(jakarta.servlet.http.HttpServletRequest request)
void	expireSession(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response)
protected String	getAccessToken(jakarta.servlet.http.HttpServletRequest request)
protected String	getRefreshToken(jakarta.servlet.http.HttpServletRequest request)
protected boolean	isAccessTokenRequest(jakarta.servlet.http.HttpServletRequest request)
protected boolean	isOAuth2Request(jakarta.servlet.http.HttpServletRequest request)
protected boolean	isRefreshTokenRequest(jakarta.servlet.http.HttpServletRequest request)
protected List<String>	resolveOAuth2SessionIds(jakarta.servlet.http.HttpServletRequest request)
List<String>	resolveSessionIds(jakarta.servlet.http.HttpServletRequest request)
void	setOauth2AuthorizationService(org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService oAuth2AuthorizationService)
protected void	setOAuth2SessionId(jakarta.servlet.http.HttpServletRequest request, String sessionId)
void	setSessionDataProvider(org.springframework.beans.factory.ObjectProvider<SessionData> sessionDataProvider)
void	setSessionId(jakarta.servlet.http.HttpServletRequest request, jakarta.servlet.http.HttpServletResponse response, String sessionId)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

SESSION_ID

public static final String SESSION_ID

See Also:

• Constant Field Values

ACCESS_TOKEN

public static final String ACCESS_TOKEN

See Also:

• Constant Field Values

oAuth2AuthorizationService

protected org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService oAuth2AuthorizationService

cookieHttpSessionIdResolver

protected org.springframework.session.web.http.HttpSessionIdResolver cookieHttpSessionIdResolver

sessionDataProvider

protected org.springframework.beans.factory.ObjectProvider<SessionData> sessionDataProvider

Constructor Details

OAuth2AndCookieSessionIdResolver

public OAuth2AndCookieSessionIdResolver()

Method Details

resolveSessionIds

public List<String> resolveSessionIds(jakarta.servlet.http.HttpServletRequest request)

Specified by:

resolveSessionIds in interface org.springframework.session.web.http.HttpSessionIdResolver

setSessionId

public void setSessionId(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response,
 String sessionId)

Specified by:

setSessionId in interface org.springframework.session.web.http.HttpSessionIdResolver

expireSession

public void expireSession(jakarta.servlet.http.HttpServletRequest request,
 jakarta.servlet.http.HttpServletResponse response)

Specified by:

expireSession in interface org.springframework.session.web.http.HttpSessionIdResolver

resolveOAuth2SessionIds

protected List<String> resolveOAuth2SessionIds(jakarta.servlet.http.HttpServletRequest request)

setOAuth2SessionId

protected void setOAuth2SessionId(jakarta.servlet.http.HttpServletRequest request,
 String sessionId)

expireOAuth2Session

protected void expireOAuth2Session(jakarta.servlet.http.HttpServletRequest request)

isOAuth2Request

protected boolean isOAuth2Request(jakarta.servlet.http.HttpServletRequest request)

isRefreshTokenRequest

protected boolean isRefreshTokenRequest(jakarta.servlet.http.HttpServletRequest request)

isAccessTokenRequest

protected boolean isAccessTokenRequest(jakarta.servlet.http.HttpServletRequest request)

getAccessToken

protected String getAccessToken(jakarta.servlet.http.HttpServletRequest request)

getRefreshToken

protected String getRefreshToken(jakarta.servlet.http.HttpServletRequest request)

setOauth2AuthorizationService

@Autowired
public void setOauth2AuthorizationService(org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationService oAuth2AuthorizationService)

setSessionDataProvider

@Autowired
public void setSessionDataProvider(org.springframework.beans.factory.ObjectProvider<SessionData> sessionDataProvider)