SessionMgmtBean.java 2.75 KB
/*
 * Copyright Codecrew Ry
 * 
 * All rights reserved.
 * 
 * This license applies to any software containing a notice placed by the 
 * copyright holder. Such software is herein referred to as the Software. 
 * This license covers modification, distribution and use of the Software. 
 * 
 * Any distribution and use in source and binary forms, with or without 
 * modification is not permitted without explicit written permission from the 
 * copyright owner. 
 * 
 * A non-exclusive royalty-free right is granted to the copyright owner of the 
 * Software to use, modify and distribute all modifications to the Software in 
 * future versions of the Software. 
 * 
 */
package fi.codecrew.moya.beans;

import java.util.Collections;
import java.util.Set;
import java.util.concurrent.ConcurrentHashMap;

import javax.annotation.security.DeclareRoles;
import javax.annotation.security.RolesAllowed;
import javax.ejb.ConcurrencyManagement;
import javax.ejb.ConcurrencyManagementType;
import javax.ejb.LocalBean;
import javax.ejb.Lock;
import javax.ejb.LockType;
import javax.ejb.Singleton;
import javax.ejb.TransactionAttribute;
import javax.ejb.TransactionAttributeType;
import javax.servlet.http.HttpSession;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.codecrew.moya.clientutils.BortalLocalContextHolder;
import fi.codecrew.moya.enums.apps.UserPermission;

/**
 * Session Bean implementation class SesionMgmtBeanLocal
 */
@Singleton
@LocalBean
@ConcurrencyManagement(ConcurrencyManagementType.BEAN)
@TransactionAttribute(TransactionAttributeType.SUPPORTS)
@DeclareRoles({ UserPermission.S_MANAGE_HTTP_SESSION })
@Lock(LockType.READ)
public class SessionMgmtBean implements SessionMgmtBeanLocal {

	private final ConcurrentHashMap<String, UserContainer> sessionUsers = new ConcurrentHashMap<>();

	private final Set<HttpSession> sessions = Collections.newSetFromMap(new ConcurrentHashMap<HttpSession, Boolean>());

	@SuppressWarnings("unused")
	private static final Logger logger = LoggerFactory.getLogger(SessionMgmtBean.class);

	/**
	 * Default constructor.
	 */
	public SessionMgmtBean() {
	}

	@Override
	public void updateSessionUser(String sessionId, String user) {

		if (!sessionUsers.containsKey(sessionId)) {
			sessionUsers.putIfAbsent(sessionId, new UserContainer(user));
		}
	}

	@Override
	public void sessionCreated(HttpSession session) {

		sessions.add(session);
	}

	@Override
	public void sessionDestroyed(HttpSession session) {
		sessionUsers.remove(session.getId());
		sessions.remove(session);
	}

	@Override
	@RolesAllowed(UserPermission.S_MANAGE_HTTP_SESSION)
	public Set<HttpSession> getSessions() {
		return Collections.unmodifiableSet(sessions);
	}

	@Override
	public UserContainer getUsername(String sessionId) {
		return sessionUsers.get(sessionId);
	}

}