org.eclipse.jetty.server.session

Class DefaultSessionIdManager

java.lang.Object

org.eclipse.jetty.util.component.AbstractLifeCycle

org.eclipse.jetty.util.component.ContainerLifeCycle

org.eclipse.jetty.server.session.DefaultSessionIdManager

All Implemented Interfaces:

SessionIdManager, Container, Destroyable, Dumpable, LifeCycle

public class DefaultSessionIdManager
extends ContainerLifeCycle
implements SessionIdManager

DefaultSessionIdManager Manages session ids to ensure each session id within a context is unique, and that session ids can be shared across contexts (but not session contents). There is only 1 session id manager per Server instance. Runs a HouseKeeper thread to periodically check for expired Sessions.

See Also:

HouseKeeper

Nested Class Summary

Nested classes/interfaces inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

AbstractLifeCycle.AbstractLifeCycleListener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.LifeCycle

LifeCycle.Listener

Nested classes/interfaces inherited from interface org.eclipse.jetty.util.component.Container

Container.InheritedListener, Container.Listener

Field Summary

Fields

Modifier and Type	Field and Description
protected HouseKeeper	_houseKeeper
protected boolean	_ownHouseKeeper
protected Random	_random
protected long	_reseed
protected Server	_server
protected boolean	_weakRandom
protected String	_workerAttr
protected String	_workerName
protected static AtomicLong	COUNTER

Fields inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

FAILED, RUNNING, STARTED, STARTING, STOP_ON_FAILURE, STOPPED, STOPPING

Constructor Summary

Constructors

Constructor and Description
DefaultSessionIdManager(Server server)
DefaultSessionIdManager(Server server, Random random)

Method Summary

Modifier and Type	Method and Description
protected void	doStart()
protected void	doStop()
void	expireAll(String id) Remove an id from use by telling all contexts to remove a session with this id.
String	getExtendedId(String clusterId, HttpServletRequest request) Get the session ID with any worker ID.
String	getId(String extendedId) Get the session ID without any worker ID.
Random	getRandom()
long	getReseed()
Server	getServer()
Set<SessionHandler>	getSessionHandlers() Get SessionManager for every context.
HouseKeeper	getSessionHouseKeeper()
String	getWorkerName() Get the workname.
void	initRandom() Set up a random number generator for the sessionids.
void	invalidateAll(String id) Invalidate all sessions on all contexts that share the same id.
boolean	isIdInUse(String id)
String	newSessionId(HttpServletRequest request, long created) Create a new session id if necessary.
String	newSessionId(long seedTerm)
String	renewSessionId(String oldClusterId, String oldNodeId, HttpServletRequest request) Generate a new id for a session and update across all SessionManagers.
void	setRandom(Random random)
void	setReseed(long reseed) Set the reseed probability.
void	setServer(Server server)
void	setSessionHouseKeeper(HouseKeeper houseKeeper)
void	setWorkerName(String workerName) Set the workername.
String	toString()

Methods inherited from class org.eclipse.jetty.util.component.ContainerLifeCycle

addBean, addBean, addBean, addEventListener, addManaged, contains, destroy, dump, dump, dump, dump, dump, dumpBeans, dumpObject, dumpStdErr, dumpThis, getBean, getBeans, getBeans, isManaged, manage, removeBean, removeBeans, removeEventListener, setBeans, setStopTimeout, start, stop, unmanage, updateBean, updateBean, updateBeans

Methods inherited from class org.eclipse.jetty.util.component.AbstractLifeCycle

addLifeCycleListener, getState, getState, getStopTimeout, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.eclipse.jetty.util.component.LifeCycle

addLifeCycleListener, isFailed, isRunning, isStarted, isStarting, isStopped, isStopping, removeLifeCycleListener, start, stop

Field Detail

COUNTER

protected static final AtomicLong COUNTER

_random

protected Random _random

_weakRandom

protected boolean _weakRandom

_workerName

protected String _workerName

_workerAttr

protected String _workerAttr

_reseed

protected long _reseed

_server

protected Server _server

_houseKeeper

protected HouseKeeper _houseKeeper

_ownHouseKeeper

protected boolean _ownHouseKeeper

Constructor Detail

DefaultSessionIdManager

public DefaultSessionIdManager(Server server)

Parameters:

server - the server associated with the id manager

DefaultSessionIdManager

public DefaultSessionIdManager(Server server,
                               Random random)

Parameters:

server - the server associated with the id manager

random - a random number generator to use for ids

Method Detail

setServer

public void setServer(Server server)

Parameters:

server - the server associated with this id manager

getServer

public Server getServer()

Returns:

the server associated with this id manager

setSessionHouseKeeper

public void setSessionHouseKeeper(HouseKeeper houseKeeper)

Specified by:

setSessionHouseKeeper in interface SessionIdManager

Parameters:

houseKeeper - the housekeeper

getSessionHouseKeeper

public HouseKeeper getSessionHouseKeeper()

Specified by:

getSessionHouseKeeper in interface SessionIdManager

Returns:

the housekeeper

getWorkerName

public String getWorkerName()

Get the workname. If set, the workername is dot appended to the session ID and can be used to assist session affinity in a load balancer.

Specified by:

getWorkerName in interface SessionIdManager

Returns:

name or null

setWorkerName

public void setWorkerName(String workerName)

Set the workername. If set, the workername is dot appended to the session ID and can be used to assist session affinity in a load balancer. A worker name starting with $ is used as a request attribute name to lookup the worker name that can be dynamically set by a request Customizer.

Parameters:

workerName - the name of the worker, if null it is coerced to empty string

getRandom

public Random getRandom()

Returns:

the random number generator

setRandom

public void setRandom(Random random)

Parameters:

random - a random number generator for generating ids

getReseed

public long getReseed()

Returns:

the reseed probability

setReseed

public void setReseed(long reseed)

Set the reseed probability.

Parameters:

reseed - If non zero then when a random long modulo the reseed value == 1, the SecureRandom will be reseeded.

newSessionId

public String newSessionId(HttpServletRequest request,
                           long created)

Create a new session id if necessary.

Specified by:

newSessionId in interface SessionIdManager

Parameters:

request - the request with the sesion

created - the timestamp for when the session was created

Returns:

the new session id

See Also:

SessionIdManager.newSessionId(javax.servlet.http.HttpServletRequest, long)

newSessionId

public String newSessionId(long seedTerm)

Parameters:

seedTerm - the seed for RNG

Returns:

a new unique session id

isIdInUse

public boolean isIdInUse(String id)

Specified by:

isIdInUse in interface SessionIdManager

Parameters:

id - The plain session ID (ie no workername extension)

Returns:

True if the session ID is in use by at least one context.

See Also:

SessionIdManager.isIdInUse(java.lang.String)

doStart

protected void doStart()
                throws Exception

Overrides:

doStart in class ContainerLifeCycle

Throws:

Exception

See Also:

AbstractLifeCycle.doStart()

doStop

protected void doStop()
               throws Exception

Overrides:

doStop in class ContainerLifeCycle

Throws:

Exception

See Also:

AbstractLifeCycle.doStop()

initRandom

public void initRandom()

Set up a random number generator for the sessionids. By preference, use a SecureRandom but allow to be injected.

getExtendedId

public String getExtendedId(String clusterId,
                            HttpServletRequest request)

Get the session ID with any worker ID.

Specified by:

getExtendedId in interface SessionIdManager

Parameters:

clusterId - the cluster id

request - the request

Returns:

sessionId plus any worker ID.

getId

public String getId(String extendedId)

Get the session ID without any worker ID.

Specified by:

getId in interface SessionIdManager

Parameters:

extendedId - the session id with the worker extension

Returns:

sessionId without any worker ID.

expireAll

public void expireAll(String id)

Remove an id from use by telling all contexts to remove a session with this id.

Specified by:

expireAll in interface SessionIdManager

Parameters:

id - The session ID without any cluster node extension

See Also:

SessionIdManager.expireAll(java.lang.String)

invalidateAll

public void invalidateAll(String id)

Description copied from interface: SessionIdManager

Invalidate all sessions on all contexts that share the same id.

Specified by:

invalidateAll in interface SessionIdManager

Parameters:

id - the session id

renewSessionId

public String renewSessionId(String oldClusterId,
                             String oldNodeId,
                             HttpServletRequest request)

Generate a new id for a session and update across all SessionManagers.

Specified by:

renewSessionId in interface SessionIdManager

Parameters:

oldClusterId - the old plain session id

oldNodeId - the old fully qualified id

request - the request containing the session

Returns:

the new session id

See Also:

SessionIdManager.renewSessionId(java.lang.String, java.lang.String, javax.servlet.http.HttpServletRequest)

getSessionHandlers

public Set<SessionHandler> getSessionHandlers()

Get SessionManager for every context.

Specified by:

getSessionHandlers in interface SessionIdManager

Returns:

all session managers

toString

public String toString()

Overrides:

toString in class Object

See Also:

Object.toString()