Package org.rootservices.otter.security.session.between

Class DecryptSession<T extends Session>

java.lang.Object

org.rootservices.otter.security.session.between.DecryptSession<T>

All Implemented Interfaces:

Between

public class DecryptSession<T extends Session>
extends java.lang.Object
implements Between

Used to encrypt a session cookie.

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	COOKIE_NOT_PRESENT
static java.lang.String	COULD_NOT_ACCESS_SESSION_CTORS
static java.lang.String	COULD_NOT_CALL_THE_SESSION_COPY_CONSTRUCTOR
static java.lang.String	COULD_NOT_DECRYPT_JWE
static java.lang.String	COULD_NOT_DESERIALIZE
static java.lang.String	COULD_NOT_DESERIALIZE_JWE
static java.lang.String	COULD_NOT_GET_HEADER_JWE
static java.lang.String	FAILED_TO_COPY_REQUEST_SESSION
static java.lang.String	INVALID_SESSION_COOKIE
protected static org.apache.log4j.Logger	LOGGER
static java.lang.String	NOT_A_JWT

Constructor Summary

Constructors

Constructor	Description
DecryptSession(java.lang.String sessionCookieName, org.rootservices.jwt.config.JwtAppFactory jwtAppFactory, org.rootservices.jwt.entity.jwk.SymmetricKey preferredKey, java.util.Map<java.lang.String,org.rootservices.jwt.entity.jwk.SymmetricKey> rotationKeys, com.fasterxml.jackson.databind.ObjectMapper objectMapper)

Method Summary

Modifier and Type	Method	Description
protected T	copy(T session)	Copies the input parameter and then returns the copy.
protected T	decrypt(java.lang.String encryptedSession)
protected org.rootservices.jwt.entity.jwk.SymmetricKey	getKey(java.lang.String keyId)
protected void	onHalt(HaltException e, Response response)	This method will be called before a Halt Exception is thrown.
void	process(Method method, Request request, Response response)
protected T	toSession(byte[] json)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NOT_A_JWT

public static final java.lang.String NOT_A_JWT

See Also:

Constant Field Values

COULD_NOT_GET_HEADER_JWE

public static final java.lang.String COULD_NOT_GET_HEADER_JWE

See Also:

Constant Field Values

COULD_NOT_DESERIALIZE_JWE

public static final java.lang.String COULD_NOT_DESERIALIZE_JWE

See Also:

Constant Field Values

COULD_NOT_DECRYPT_JWE

public static final java.lang.String COULD_NOT_DECRYPT_JWE

See Also:

Constant Field Values

COULD_NOT_DESERIALIZE

public static final java.lang.String COULD_NOT_DESERIALIZE

See Also:

Constant Field Values

INVALID_SESSION_COOKIE

public static final java.lang.String INVALID_SESSION_COOKIE

See Also:

Constant Field Values

COOKIE_NOT_PRESENT

public static final java.lang.String COOKIE_NOT_PRESENT

See Also:

Constant Field Values

FAILED_TO_COPY_REQUEST_SESSION

public static final java.lang.String FAILED_TO_COPY_REQUEST_SESSION

See Also:

Constant Field Values

COULD_NOT_ACCESS_SESSION_CTORS

public static final java.lang.String COULD_NOT_ACCESS_SESSION_CTORS

See Also:

Constant Field Values

COULD_NOT_CALL_THE_SESSION_COPY_CONSTRUCTOR

public static final java.lang.String COULD_NOT_CALL_THE_SESSION_COPY_CONSTRUCTOR

See Also:

Constant Field Values

LOGGER

protected static org.apache.log4j.Logger LOGGER

Constructor Detail

DecryptSession

public DecryptSession(java.lang.String sessionCookieName,
                      org.rootservices.jwt.config.JwtAppFactory jwtAppFactory,
                      org.rootservices.jwt.entity.jwk.SymmetricKey preferredKey,
                      java.util.Map<java.lang.String,org.rootservices.jwt.entity.jwk.SymmetricKey> rotationKeys,
                      com.fasterxml.jackson.databind.ObjectMapper objectMapper)

Method Detail

process

public void process(Method method,
                    Request request,
                    Response response)
             throws HaltException

Specified by:

process in interface Between

Throws:

HaltException

copy

protected T copy(T session)
          throws SessionCtorException

Copies the input parameter and then returns the copy.

Parameters:

session - the session to copy

Returns:

an instance of T that is a copy of session

Throws:

SessionCtorException

onHalt

protected void onHalt(HaltException e,
                      Response response)

This method will be called before a Halt Exception is thrown. Override this method if you wish to change the behavior on the response right before a Halt Exception is going to be thrown. An Example would be, you may want to redirect the user to a login page.

Parameters:

e - a HaltException

response - a Response

decrypt

protected T decrypt(java.lang.String encryptedSession)
             throws InvalidSessionException,
                    SessionDecryptException

Throws:

InvalidSessionException

SessionDecryptException

toSession

protected T toSession(byte[] json)

getKey

protected org.rootservices.jwt.entity.jwk.SymmetricKey getKey(java.lang.String keyId)