Java Doc for SessionManager.java in  » Web-Framework » rife-1.6.1 » com » uwyn » rife » authentication » Java Source Code / Java DocumentationJava Source Code and Java Documentation

A SessionManager is reponsible for handling all tasks related to the lifetime of a session in which a user is successfully authenticated.

This kind of session doesn't provide any state persistance across requests and doesn't store any additional business data on the server-side. It merely provides a unique authentication id which can be used to identify a successfully authenticated user.

For safety's sake, sessions time out after a certain period of inactivity and their validity is bound only to a unique user id and a host ip. No assumptions are being made about the actual meaning or structure of a 'user'. A unique numeric identifier is all that's required.
author:
   Geert Bevin (gbevin[remove] at uwyn dot com)
version:
   $Revision: 3643 $
See Also:   com.uwyn.rife.authentication.SessionValidator
since:
   1.0

false if this was not possible (ie. the sessioncouldn't be found).
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when a session is continued. Theyare all indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

false if this was not possible (ie. the sessioncouldn't be found).
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when a session is erased. They areall indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

false if this was not possible (ie. no sessionscouldn't be found).
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when a session is erased. They areall indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

The default is false , or no restriction. true if the authentication is restricted to one host IP; or

false if the authentication ID can be used with any host IP
since:
   1.0

-1 if the session couldn't be found.
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when user id of a session isretrieved. They are all indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

false if this was not possible.
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when a session is verified. Theyare all indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

false if no session was active.
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when session are listed. They areall indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0

The default is false , or no restriction.
Parameters:
  flag - true to activate the host IP restriction; or

false otherwise
since:
   1.0

false if it was created from full credentials or if thesession couldn't be found.
exception:
  SessionManagerException - An undefined number of exceptionalcases or error situations can occur when a session is erased. They areall indicated by throwing an instance of SessionManagerException . It's up to the implementations ofthis interface to give more specific meanings to these exceptions.
since:
   1.0