Hanami backend/fi.aalto.cs.hanami.auth/FrontendSessionService

FrontendSessionService

class FrontendSessionService : AutoCloseable(source)

Exchanges A+ tokens for opaque browser sessions and resolves those sessions on later requests.

Persistent session state contains only a digest of the session ID and an authenticated encryption of the A+ token. Resolution enforces idle and absolute expiry, revokes invalid upstream tokens, and limits last-use writes to the configured interval.

Functions

open override fun close()

create

suspend fun create(token: String, replacedSessionId: String? = null): CreateFrontendSessionResponse

resolve

suspend fun resolve(sessionId: String): ResolvedFrontendSession

revoke

suspend fun revoke(sessionId: String)

revokeAllForUser

suspend fun revokeAllForUser(userId: Long)

revokeAllForUserAsync

fun revokeAllForUserAsync(userId: Long)

verifyServiceSecret

fun verifyServiceSecret(candidate: String?)