oracle.jbo.http
Class HttpSessionCookieImpl

java.lang.Object
  |
  +--oracle.jbo.common.ampool.SessionCookieImpl
        |
        +--oracle.jbo.http.HttpSessionCookieImpl

All Implemented Interfaces:

ApplicationModuleHandle, ApplicationModuleRef, oracle.jbo.http.BindingListener, HttpSessionCookie, java.io.Serializable, SessionCookie

Direct Known Subclasses:

SharedSessionCookieImpl

public class HttpSessionCookieImpl

extends SessionCookieImpl

implements HttpSessionCookie, oracle.jbo.http.BindingListener, java.io.Serializable

Default HttpSessionCookie implementation.

The implementation uses a pluggable helper interface, HttpSessionCookieHelper, to generate unique session identifiers for browser sessions, to read browser cookie values, and to write browser cookie values.

Implements the BindingListener interface. When a session HttpContainer instance is unbound from an HttpSession context the BindingListeners will be notified that a timeout event occured. The timeout implementation releases the application module resource to the application pool. The release is unmanaged since the request is assumed to have already ended.

The HttpSessionCookieImpl also implements additional support for BC4J based authentication. If a single sign on module like mod_osso is not being used then an application developer can set a security principal and security credential in the HttpSession context for later authentication by the BC4J security login module. In order to enable this mode the application developer must have configured the jbo.security.enforce property. The principal and credentials should be cached in the session as follows:

session.setAttribute( JboContext.SECURITY_PRINCIPAL, (String)); session.setAttribute( JboContext.SECURITY_CREDENTIALS, (String));

Finally, the HttpSessionCookie implementation uses composition to implement the SessionCookie interface. All SessionCookie methods are delegated to an instance of the default SessionCookie implementation. Please see SessionCookieImpl for more infomartion regarding the default session cookie implementation.

See Also:

Serialized Form

Fields inherited from interface oracle.jbo.common.ampool.SessionCookie

NULL_PASSIVATION_ID, SHARED, STATE_MANAGED, STATE_UNMANAGED, UNSHARED

Constructor Summary

HttpSessionCookieImpl(java.lang.String applicationId, java.lang.String sessionId, ApplicationPool pool)
This constructor may be used if the sessionId is already known.

HttpSessionCookieImpl(java.lang.String applicationId, java.lang.String sessionId, ApplicationPool pool, javax.servlet.http.HttpServletRequest request)

Method Summary

Type	Method
boolean	isFailoverEnabled() Indicates that session application module state should be persisted to secondary storage immediately upon a managed release.
java.lang.String	readValue(java.lang.Object source) Read the cookie value to the specified data sink.
void	timeout(oracle.jbo.http.BindingEvent ev)
void	valueBound(oracle.jbo.http.BindingEvent ev)
void	valueUnbound(oracle.jbo.http.BindingEvent ev)
void	writeValue(java.lang.Object sink) Write the cookie value to the specified data sink.

Methods inherited from class oracle.jbo.common.ampool.SessionCookieImpl

copyInto, equals, getApplicationId, getClientEnvironment, getClientEnvironment, getEnvInfoProvider, getEnvironment, getEnvironment, getLastUpdate, getPassivationId, getPoolSignature, getProperty, getReservedPassivationId, getSessionId, getSSOSubscriber, getSSOUserName, getSyncLock, getThreadRefCount, getUserData, getValue, hashCode, isActivationRequired, isActivationRequired, isApplicationModuleReserved, isConnectionPoolingEnabled, isResetNonTransactionalState, parsePassivationId, parseSessionId, releaseApplicationModule, releaseApplicationModule, reservePassivationId, reservePassivationId, resetState, resetStateInternal, setActivationRequired, setEnvInfoProvider, setEnvironment, setEnvironment, setPassivationId, setReservedPassivationId, setSessionCookieListener, setSingleThreaded, timeout, toString, useApplicationModule, useApplicationModule, useApplicationModule

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface oracle.jbo.common.ampool.SessionCookie

copyInto, equals, getApplicationId, getEnvInfoProvider, getLastUpdate, getPassivationId, getPoolSignature, getReservedPassivationId, getSessionId, getSSOSubscriber, getSSOUserName, getSyncLock, getThreadRefCount, getValue, hashCode, isActivationRequired, isActivationRequired, isConnectionPoolingEnabled, isResetNonTransactionalState, reservePassivationId, reservePassivationId, resetStateInternal, setActivationRequired, setEnvInfoProvider, setEnvironment, setEnvironment, setPassivationId, setReservedPassivationId, setSessionCookieListener, toString

Methods inherited from interface oracle.jbo.common.ampool.ApplicationModuleRef

isApplicationModuleReserved, releaseApplicationModule, releaseApplicationModule, resetState, useApplicationModule, useApplicationModule, useApplicationModule

Methods inherited from interface oracle.jbo.ApplicationModuleHandle

getClientEnvironment, getClientEnvironment, getEnvironment, getEnvironment, getUserData

Constructor Detail

HttpSessionCookieImpl

public HttpSessionCookieImpl(java.lang.String applicationId,
                             java.lang.String sessionId,
                             ApplicationPool pool)

This constructor may be used if the sessionId is already known.

HttpSessionCookieImpl

public HttpSessionCookieImpl(java.lang.String applicationId,
                             java.lang.String sessionId,
                             ApplicationPool pool,
                             javax.servlet.http.HttpServletRequest request)

Method Detail

valueBound

public void valueBound(oracle.jbo.http.BindingEvent ev)

Specified by:

valueBound in interface oracle.jbo.http.BindingListener

valueUnbound

public void valueUnbound(oracle.jbo.http.BindingEvent ev)

Specified by:

valueUnbound in interface oracle.jbo.http.BindingListener

timeout

public void timeout(oracle.jbo.http.BindingEvent ev)

Specified by:

timeout in interface oracle.jbo.http.BindingListener

writeValue

public void writeValue(java.lang.Object sink)

Description copied from interface: SessionCookie

Write the cookie value to the specified data sink.

Specified by:

writeValue in interface SessionCookie

Overrides:

writeValue in class SessionCookieImpl

Following copied from interface: oracle.jbo.common.ampool.SessionCookie

Parameters:

sink - a data sink

readValue

public java.lang.String readValue(java.lang.Object source)

Description copied from interface: SessionCookie

Read the cookie value to the specified data sink.

Specified by:

readValue in interface SessionCookie

Overrides:

readValue in class SessionCookieImpl

Following copied from interface: oracle.jbo.common.ampool.SessionCookie

Parameters:

source - a data source

isFailoverEnabled

public boolean isFailoverEnabled()

Description copied from interface: SessionCookie

Indicates that session application module state should be persisted to secondary storage immediately upon a managed release.

Session cookie developers should be careful that this value not change after a session cookie has become active.

Specified by:

isFailoverEnabled in interface SessionCookie

Overrides:

isFailoverEnabled in class SessionCookieImpl