Package net.ltgt.oidc.servlet

Class InMemoryLoggedOutSessionStore

java.lang.Object

net.ltgt.oidc.servlet.InMemoryLoggedOutSessionStore

All Implemented Interfaces:

LoggedOutSessionStore

public class InMemoryLoggedOutSessionStore
extends Object
implements LoggedOutSessionStore

An implementation of LoggedOutSessionStore that stores session IDs in memory.

Field Summary

Fields inherited from interface net.ltgt.oidc.servlet.LoggedOutSessionStore

CONTEXT_ATTRIBUTE_NAME

Constructor Summary

Constructors

Constructor	Description
InMemoryLoggedOutSessionStore()

Method Summary

Modifier and Type	Method	Description
void	forget(SessionID sessionID)	Forgets about the given session ID.
boolean	isLoggedOut(SessionID sessionID)	Returns whether the given session ID has been logged out.
void	logout(SessionID sessionID)	Records the given session ID as having been logged out at the OpenID Provider.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

InMemoryLoggedOutSessionStore

public InMemoryLoggedOutSessionStore()

Method Details

logout

public void logout(SessionID sessionID)

Description copied from interface: LoggedOutSessionStore

Records the given session ID as having been logged out at the OpenID Provider.

Implementations could also directly invalidate the session if possible, rather than only marking it as logged out to later be invalidated by the UserFilter. In this case, the BackchannelLogoutSessionListener might not be necessary.

Specified by:

logout in interface LoggedOutSessionStore

See Also:

• BackchannelLogoutServlet

isLoggedOut

public boolean isLoggedOut(SessionID sessionID)

Description copied from interface: LoggedOutSessionStore

Returns whether the given session ID has been logged out.

Specified by:

isLoggedOut in interface LoggedOutSessionStore

See Also:

• LoggedOutSessionStore.logout(com.nimbusds.openid.connect.sdk.claims.SessionID)
• UserFilter

forget

public void forget(SessionID sessionID)

Description copied from interface: LoggedOutSessionStore

Forgets about the given session ID.

This method should be called when the corresponding HttpSession has been destroyed, to release memory.

Specified by:

forget in interface LoggedOutSessionStore

See Also:

• BackchannelLogoutSessionListener