Class HttpSessionFactory

java.lang.Object
ddf.security.http.impl.HttpSessionFactory
All Implemented Interfaces:
ddf.security.http.SessionFactory

public class HttpSessionFactory extends Object implements ddf.security.http.SessionFactory
  • Constructor Details

    • HttpSessionFactory

      public HttpSessionFactory()
  • Method Details

    • getOrCreateSession

      public javax.servlet.http.HttpSession getOrCreateSession(javax.servlet.http.HttpServletRequest httpRequest)
      Synchronized method because of jettys getSession method is not thread safe. Additionally, assures a SAML PrincipalHolder has been set on the SecurityConstants.SECURITY_TOKEN_KEY attribute
      Specified by:
      getOrCreateSession in interface ddf.security.http.SessionFactory
      Parameters:
      httpRequest -
      Returns:
    • setExpirationTime

      public void setExpirationTime(int expirationTime)
    • setSecurityLogger

      public void setSecurityLogger(ddf.security.audit.SecurityLogger securityLogger)