org.camunda.bpm.webapp.impl.security.filter.util

Class HttpSessionMutexListener

java.lang.Object

org.camunda.bpm.webapp.impl.security.filter.util.HttpSessionMutexListener

All Implemented Interfaces:

EventListener, javax.servlet.http.HttpSessionListener

public class HttpSessionMutexListener
extends Object
implements javax.servlet.http.HttpSessionListener

Automatically creates a session mutex when a HttpSession is created. This way, it is guaranteed that the session mutex is the same object throughout the session lifetime. This is not 100% guaranteed across all possible servlet containers when using the HttpSession reference itself. The session mutex can be accessed under the CsrfConstants.CSRF_SESSION_MUTEX session attribute and the HttpSessionMutexListener needs to be registered as a listener in web.xml.

Author:

Nikola Koevski

Constructor Summary

Constructors

Constructor and Description
HttpSessionMutexListener()

Method Summary

Modifier and Type	Method and Description
void	sessionCreated(javax.servlet.http.HttpSessionEvent event)
void	sessionDestroyed(javax.servlet.http.HttpSessionEvent event)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

HttpSessionMutexListener

public HttpSessionMutexListener()

Method Detail

sessionCreated

public void sessionCreated(javax.servlet.http.HttpSessionEvent event)

Specified by:

sessionCreated in interface javax.servlet.http.HttpSessionListener

sessionDestroyed

public void sessionDestroyed(javax.servlet.http.HttpSessionEvent event)

Specified by:

sessionDestroyed in interface javax.servlet.http.HttpSessionListener