com.atlassian.jira.web.session.currentusers

Class JiraUserSessionInvalidator

java.lang.Object

com.atlassian.jira.web.session.currentusers.JiraUserSessionInvalidator

public class JiraUserSessionInvalidator
extends Object

If you want to invalidate a session in JIRA with given id, this class (component) is for you.

It will use JiraUserSessionTracker to track invalidated sessions to invalidate them during next request using given session. It is intended to be used by filter that runs before any authentication filter and invalidates HttpSession for current request if it is marked as invalidated.

It uses JiraUserSessionTracker to check for sessions and invalidation flag.

Since:

v7.1.2

See Also:

JiraLoginFilter

Constructor Summary

Constructors

Constructor and Description
JiraUserSessionInvalidator()

Method Summary

Modifier and Type	Method and Description
void	handleSessionInvalidation(javax.servlet.http.HttpServletRequest request) Will invalidate session passed in argument if it's id was marked as invalid.
void	invalidateSession(String sessionId) Mark id of session as invalid to invalidate session with this id next time it is used in request.
void	onUserCredentialUpdatedEvent(com.atlassian.crowd.event.user.UserCredentialUpdatedEvent event)
void	removeInvalidationFlagFromSession(javax.servlet.http.HttpServletRequest httpServletRequest) Removes invalidation flag from given session.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JiraUserSessionInvalidator

public JiraUserSessionInvalidator()

Method Detail

handleSessionInvalidation

public void handleSessionInvalidation(javax.servlet.http.HttpServletRequest request)

Will invalidate session passed in argument if it's id was marked as invalid. Should be called for every request to ensure invalidation of sessions that were supposed to be invalid.

Parameters:

request - current ServletRequest

invalidateSession

public void invalidateSession(String sessionId)

Mark id of session as invalid to invalidate session with this id next time it is used in request.

Parameters:

sessionId - - id of session to be invalidated

See Also:

handleSessionInvalidation(javax.servlet.http.HttpServletRequest)

removeInvalidationFlagFromSession

public void removeInvalidationFlagFromSession(javax.servlet.http.HttpServletRequest httpServletRequest)

Removes invalidation flag from given session.

Parameters:

httpServletRequest - session which invalidation flag should be removed

onUserCredentialUpdatedEvent

@EventListener
public void onUserCredentialUpdatedEvent(com.atlassian.crowd.event.user.UserCredentialUpdatedEvent event)