SessionMgmtBean.java 2.43 KB
/*
 * Copyright Codecrew Ry
 * 
 * All rights reserved.
 * 
 * This license applies to any software containing a notice placed by the 
 * copyright holder. Such software is herein referred to as the Software. 
 * This license covers modification, distribution and use of the Software. 
 * 
 * Any distribution and use in source and binary forms, with or without 
 * modification is not permitted without explicit written permission from the 
 * copyright owner. 
 * 
 * A non-exclusive royalty-free right is granted to the copyright owner of the 
 * Software to use, modify and distribute all modifications to the Software in 
 * future versions of the Software. 
 * 
 */
package fi.codecrew.moya.beans;

import java.util.Collections;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import javax.annotation.security.DeclareRoles;
import javax.annotation.security.RolesAllowed;
import javax.ejb.LocalBean;
import javax.ejb.Singleton;
import javax.servlet.http.HttpSession;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.codecrew.moya.beans.SessionMgmtBeanLocal;
import fi.codecrew.moya.enums.apps.UserPermission;

/**
 * Session Bean implementation class SesionMgmtBeanLocal
 */
@Singleton
@LocalBean
@DeclareRoles({ UserPermission.S_MANAGE_HTTP_SESSION })
public class SessionMgmtBean implements SessionMgmtBeanLocal {

	/**
	 * Default constructor.
	 */
	public SessionMgmtBean() {
		// TODO Auto-generated constructor stub
	}

	private final Map<String, String> sessionUsers = Collections.synchronizedMap(new HashMap<String, String>());
	private final Set<HttpSession> sessions = Collections.synchronizedSet(new HashSet<HttpSession>());

	@SuppressWarnings("unused")
	private static final Logger logger = LoggerFactory.getLogger(SessionMgmtBean.class);

	@Override
	public void updateSessionUser(String sessionId, String user)
	{

		if (!sessionUsers.containsKey(sessionId))
		{
			sessionUsers.put(sessionId, user);
		}
	}

	@Override
	public void sessionCreated(HttpSession session) {
		sessions.add(session);
	}

	@Override
	public void sessionDestroyed(HttpSession session) {
		sessionUsers.remove(session.getId());
		sessions.remove(session);
	}

	@Override
	@RolesAllowed(UserPermission.S_MANAGE_HTTP_SESSION)
	public Set<HttpSession> getSessions()
	{
		return Collections.unmodifiableSet(sessions);
	}

	@Override
	public String getUsername(String sessionId) {
		return sessionUsers.get(sessionId);
	}

}