Package sk.iway.iwcm.components.users.sessions

Class SessionService

java.lang.Object

sk.iway.iwcm.components.users.sessions.SessionService

@Service
public class SessionService
extends Object

Authorizes session operations and builds safe administrator summaries from local and cluster data.

Constructor Summary

Constructors

Constructor	Description
SessionService()

Method Summary

Modifier and Type	Method	Description
List<LoggedAdministratorDto>	loggedAdministrators(Identity actor)	Lists administrators visible in the active domain, with distinct sessions across cluster nodes.
SessionLogoutResultDto	logoutAdministrator(Identity actor, int userId)	Ends all sessions of another administrator visible in the active domain and audits the acting account.
SessionLogoutResultDto	logoutSession(Identity actor, String currentSessionId, String sessionId)	Ends only an owned session other than the one making this request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SessionService

public SessionService()

Method Details

loggedAdministrators

public List<LoggedAdministratorDto> loggedAdministrators(Identity actor)

Lists administrators visible in the active domain, with distinct sessions across cluster nodes. The caller's list permission is independent of the permission to end another administrator's sessions.

Parameters:

actor - authenticated administrator requesting the list

Returns:

alphabetically ordered administrator summaries without session IDs

logoutSession

public SessionLogoutResultDto logoutSession(Identity actor,
 String currentSessionId,
 String sessionId)

Ends only an owned session other than the one making this request. Remote invalidation is queued only after the cluster snapshot confirms both the ID and owner.

Parameters:

actor - authenticated administrator

currentSessionId - session making the request, which must remain active

sessionId - owned session to end

Returns:

rejected, completed or accepted with cluster propagation pending

logoutAdministrator

public SessionLogoutResultDto logoutAdministrator(Identity actor,
 int userId)

Ends all sessions of another administrator visible in the active domain and audits the acting account.

Parameters:

actor - administrator with users.edit_admins permission; list permission is not required

userId - other administrator whose sessions should end

Returns:

accepted logout and whether remote invalidation remains pending