org.wso2.appserver.webapp.security.agent

Class SSOAgentSessionManager

java.lang.Object

org.wso2.appserver.webapp.security.agent.SSOAgentSessionManager

public class SSOAgentSessionManager
extends Object

This class manages the authenticated sessions of single-sign-on (SSO) function.

Session Index received from the identity provider is mapped to service provider sessions, so that a single-logout (SLO) request can be handled by invalidating the service provider session mapped to identity provider session index.

Since:

6.0.0

Method Summary

Modifier and Type	Method and Description
static void	addAuthenticatedSession(javax.servlet.http.HttpSession session) Adds an authenticated session to the global single-sign-on (SSO) session manager map.
static Set<javax.servlet.http.HttpSession>	getAllInvalidatableSessions(javax.servlet.http.HttpSession session) Returns all sessions associated with the session index retrieved from a specified HttpSession which are to be invalidated.
static Set<javax.servlet.http.HttpSession>	getAllInvalidatableSessions(String sessionIndex) Returns all sessions associated with a specified session index, which are to be invalidated.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

addAuthenticatedSession

public static void addAuthenticatedSession(javax.servlet.http.HttpSession session)

Adds an authenticated session to the global single-sign-on (SSO) session manager map.

Parameters:

session - the authenticated session to be added to the session map

getAllInvalidatableSessions

public static Set<javax.servlet.http.HttpSession> getAllInvalidatableSessions(javax.servlet.http.HttpSession session)

Returns all sessions associated with the session index retrieved from a specified HttpSession which are to be invalidated.

Internally, these sessions are removed from the global single-sign-on (SSO) session manager map.

Parameters:

session - the HttpSession instance

Returns:

set of sessions associated with the session index

getAllInvalidatableSessions

public static Set<javax.servlet.http.HttpSession> getAllInvalidatableSessions(String sessionIndex)

Returns all sessions associated with a specified session index, which are to be invalidated.

Internally, these sessions are removed from the global single-sign-on (SSO) session manager map.

Parameters:

sessionIndex - the session index of whom all sessions are to be invalidated

Returns:

set of sessions associated with the session index