io.jooby.jwt

Class JwtSessionStore

java.lang.Object

io.jooby.jwt.JwtSessionStore

All Implemented Interfaces:

SessionStore

public class JwtSessionStore
extends Object
implements SessionStore

A HTTP cookie session store using JSON Web Token. Usage:

 {
   String key = "256 bit key"
   setSessionStore(new JwtSession(key));
 }
 

It uses HMAC-SHA-256 for signing the cookie. Secret key and cookie option can be specify programmatically or in your application configuration file. This session store delegates to SessionStore.signed(SessionToken, Function, Function) using JSON Web Token library.

Since:

2.2.0

Author:

edgar

Constructor Summary

Constructors

Constructor and Description
JwtSessionStore(Key key, SessionToken token) Creates a JSON Web Token session store.
JwtSessionStore(String key) Creates a JSON Web Token session store.
JwtSessionStore(String key, SessionToken token) Creates a JSON Web Token session store.

Method Summary

Modifier and Type	Method and Description
void	deleteSession(Context ctx, Session session)
Session	findSession(Context ctx)
Session	newSession(Context ctx)
void	renewSessionId(Context ctx, Session session)
void	saveSession(Context ctx, Session session)
void	touchSession(Context ctx, Session session)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.jooby.SessionStore

memory, memory, memory, signed, signed, signed, signed

Constructor Detail

JwtSessionStore

public JwtSessionStore(@Nonnull
                       String key)

Creates a JSON Web Token session store. It uses a cookie token: SessionToken.SID.

Parameters:

key - Secret key.

JwtSessionStore

public JwtSessionStore(@Nonnull
                       String key,
                       @Nonnull
                       SessionToken token)

Creates a JSON Web Token session store. Session token is usually a SessionToken.signedCookie(Cookie), SessionToken.header(String) or combination of both.

Parameters:

key - Secret key.

token - Session token.

JwtSessionStore

public JwtSessionStore(@Nonnull
                       Key key,
                       @Nonnull
                       SessionToken token)

Creates a JSON Web Token session store. Session token is usually a SessionToken.signedCookie(Cookie), SessionToken.header(String) or combination of both.

Parameters:

key - Secret key.

token - Session token.

Method Detail

newSession

@Nonnull
public Session newSession(@Nonnull
                                   Context ctx)

Specified by:

newSession in interface SessionStore

findSession

@Nullable
public Session findSession(@Nonnull
                                     Context ctx)

Specified by:

findSession in interface SessionStore

deleteSession

public void deleteSession(@Nonnull
                          Context ctx,
                          @Nonnull
                          Session session)

Specified by:

deleteSession in interface SessionStore

touchSession

public void touchSession(@Nonnull
                         Context ctx,
                         @Nonnull
                         Session session)

Specified by:

touchSession in interface SessionStore

saveSession

public void saveSession(@Nonnull
                        Context ctx,
                        @Nonnull
                        Session session)

Specified by:

saveSession in interface SessionStore

renewSessionId

public void renewSessionId(@Nonnull
                           Context ctx,
                           @Nonnull
                           Session session)

Specified by:

renewSessionId in interface SessionStore