org.sourceid.saml20.adapter.state

Class SessionStateSupport

java.lang.Object

org.sourceid.saml20.adapter.state.SessionStateSupport

Direct Known Subclasses:

ApplicationSessionStateSupport

public class SessionStateSupport
extends Object

Provides functionality similar to using the HTTP Session. You can set, get and remove attributes associated with a user's session.
The advantage of using this rather than the HttpSession object is that it uses the PingFederate server's underlying implementation of inter-request state management InterRequestStateMgmt to replicate or share the data in a clustered environment.

Constructor Summary

Constructors

Constructor and Description
SessionStateSupport()

Method Summary

Modifier and Type	Method and Description
Object	getAttribute(String name, javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp) Retrieves a named attribute from the the user session (as determined by the request)
Object	removeAttribute(String name, javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp) Removes a named attribute from the the user session (as determined by the request)
void	setAttribute(String name, Object value, javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp) Deprecated. As of release 6.5, replaced by setAttribute(String, Object, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, boolean)
void	setAttribute(String name, Object value, javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp, boolean usedAsLoginCtx) Sets or associates a named attribute with the user session (as determined by the request)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SessionStateSupport

public SessionStateSupport()

Method Detail

setAttribute

public void setAttribute(String name,
                         Object value,
                         javax.servlet.http.HttpServletRequest req,
                         javax.servlet.http.HttpServletResponse resp)

Deprecated. As of release 6.5, replaced by setAttribute(String, Object, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, boolean)

Parameters:

name - the name of the attribute

value - the attribute value

req -

resp -

setAttribute

public void setAttribute(String name,
                         Object value,
                         javax.servlet.http.HttpServletRequest req,
                         javax.servlet.http.HttpServletResponse resp,
                         boolean usedAsLoginCtx)

Sets or associates a named attribute with the user session (as determined by the request)

Parameters:

name - the name of the attribute

value - the attribute value

req -

resp -

usedAsLoginCtx - Instructs the the underlying state mechanism (if appropriate) as to if certain mitigation steps against session fixation should be taken. Use true, if the attribute is used to maintain a security or login context, and false otherwise.

Since:

6.5

getAttribute

public Object getAttribute(String name,
                           javax.servlet.http.HttpServletRequest req,
                           javax.servlet.http.HttpServletResponse resp)

Retrieves a named attribute from the the user session (as determined by the request)

Parameters:

name - name the name of the attribute

req -

resp -

Returns:

the attribute value

removeAttribute

public Object removeAttribute(String name,
                              javax.servlet.http.HttpServletRequest req,
                              javax.servlet.http.HttpServletResponse resp)

Removes a named attribute from the the user session (as determined by the request)

Parameters:

name - name the name of the attribute

req -

resp -

Returns:

the attribute value