Package com.atlassian.jira.web.session.currentusers

Class JiraUserSessionInvalidator

java.lang.Object
com.atlassian.jira.web.session.currentusers.JiraUserSessionInvalidator
public class JiraUserSessionInvalidator extends Object
If you want to invalidate a session in JIRA with given id, this class (component) is for you.

It will use JiraUserSessionTracker to track invalidated sessions to invalidate them during next request using given session. It is intended to be used by filter that runs before any authentication filter and invalidates HttpSession for current request if it is marked as invalidated.

It uses JiraUserSessionTracker to check for sessions and invalidation flag.

Since:
v7.1.2
See Also:

  • Constructor Details

    • JiraUserSessionInvalidator

      public JiraUserSessionInvalidator(JiraUserSessionTracker jiraUserSessionTracker, com.atlassian.seraph.spi.rememberme.RememberMeTokenDao rememberMeTokenDao)

  • Method Details

    • handleSessionInvalidation

      public void handleSessionInvalidation(jakarta.servlet.http.HttpServletRequest request)
      Will invalidate session passed in argument if it's id was marked as invalid. Should be called for every request to ensure invalidation of sessions that were supposed to be invalid.
      Parameters:
      request - current ServletRequest

    • invalidateSession

      public void invalidateSession(String sessionId)
      Mark id of session as invalid to invalidate session with this id next time it is used in request.
      Parameters:
      sessionId - - id of session to be invalidated
      See Also:

    • removeInvalidationFlagFromSession

      public void removeInvalidationFlagFromSession(jakarta.servlet.http.HttpServletRequest httpServletRequest)
      Removes invalidation flag from given session.
      Parameters:
      httpServletRequest - session which invalidation flag should be removed

    • onUserCredentialUpdatedEvent

      @EventListener public void onUserCredentialUpdatedEvent(com.atlassian.crowd.event.user.UserCredentialUpdatedEvent event)

    • onUserAnonymizationFinishedEvent

      @EventListener public void onUserAnonymizationFinishedEvent(UserAnonymizationFinishedEvent anonymizationEvent)

    • onSessionInvalidationReplicatedEvent

      @EventListener public void onSessionInvalidationReplicatedEvent(SessionInvalidationReplicatedEvent sessionInvalidationReplicatedEvent)