Package org.graylog2.security

Class UserSessionTerminationService

java.lang.Object

com.google.common.util.concurrent.AbstractIdleService

org.graylog2.security.UserSessionTerminationService

All Implemented Interfaces:

com.google.common.util.concurrent.Service

@Singleton
public class UserSessionTerminationService
extends com.google.common.util.concurrent.AbstractIdleService

This service checks on startup if all user sessions should be terminated. This can be requested by bumping the TERMINATION_REVISION number. The service also listens for UserChangedEvent events and terminates all sessions for disabled users.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	UserSessionTerminationService.GlobalTerminationRevisionConfig

Nested classes/interfaces inherited from interface com.google.common.util.concurrent.Service

com.google.common.util.concurrent.Service.Listener, com.google.common.util.concurrent.Service.State

Constructor Summary

Constructors

Constructor	Description
UserSessionTerminationService(MongoDbSessionDAO sessionDao, MongoDBSessionService sessionService, org.apache.shiro.mgt.DefaultSecurityManager securityManager, ClusterConfigService clusterConfigService, UserService userService, com.google.common.eventbus.EventBus eventBus)

Method Summary

Modifier and Type	Method	Description
List<org.apache.shiro.session.Session>	getActiveSessionsForUser(User user)
void	handleUserChanged(UserChangedEvent event)
void	runGlobalSessionTermination()	Terminate all user sessions, if the revision is outdated.
protected void	shutDown()
protected void	startUp()

Methods inherited from class com.google.common.util.concurrent.AbstractIdleService

addListener, awaitRunning, awaitRunning, awaitRunning, awaitTerminated, awaitTerminated, awaitTerminated, executor, failureCause, isRunning, serviceName, startAsync, state, stopAsync, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

UserSessionTerminationService

@Inject
public UserSessionTerminationService(MongoDbSessionDAO sessionDao,
 MongoDBSessionService sessionService,
 org.apache.shiro.mgt.DefaultSecurityManager securityManager,
 ClusterConfigService clusterConfigService,
 UserService userService,
 com.google.common.eventbus.EventBus eventBus)

Method Details

handleUserChanged

public void handleUserChanged(UserChangedEvent event)

startUp

protected void startUp()
                throws Exception

Specified by:

startUp in class com.google.common.util.concurrent.AbstractIdleService

Throws:

Exception

shutDown

protected void shutDown()
                 throws Exception

Specified by:

shutDown in class com.google.common.util.concurrent.AbstractIdleService

Throws:

Exception

runGlobalSessionTermination

public void runGlobalSessionTermination()

Terminate all user sessions, if the revision is outdated.

To make sure that we don't terminate user sessions concurrently, this method should be called on the primary node only.

getActiveSessionsForUser

public List<org.apache.shiro.session.Session> getActiveSessionsForUser(User user)