SessionMgmtBean.java

package fi.insomnia.bortal.beans;

import java.util.Collections;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import javax.annotation.security.DeclareRoles;
import javax.annotation.security.RolesAllowed;
import javax.ejb.LocalBean;
import javax.ejb.Singleton;
import javax.servlet.http.HttpSession;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import fi.insomnia.bortal.enums.apps.UserPermission;

/**
 * Session Bean implementation class SesionMgmtBeanLocal
 */
@Singleton
@LocalBean
@DeclareRoles({ UserPermission.S_MANAGE_HTTP_SESSION })
public class SessionMgmtBean implements SessionMgmtBeanLocal {

	/**
	 * Default constructor.
	 */
	public SessionMgmtBean() {
		// TODO Auto-generated constructor stub
	}

	private final Map<String, String> sessionUsers = Collections.synchronizedMap(new HashMap<String, String>());
	private final Set<HttpSession> sessions = Collections.synchronizedSet(new HashSet<HttpSession>());

	@SuppressWarnings("unused")
	private static final Logger logger = LoggerFactory.getLogger(SessionMgmtBean.class);

	@Override
	public void updateSessionUser(String sessionId, String user)
	{

		if (!sessionUsers.containsKey(sessionId))
		{
			sessionUsers.put(sessionId, user);
		}
	}

	@Override
	public void sessionCreated(HttpSession session) {
		sessions.add(session);
	}

	@Override
	public void sessionDestroyed(HttpSession session) {
		sessionUsers.remove(session.getId());
		sessions.remove(session);
	}

	@Override
	@RolesAllowed(UserPermission.S_MANAGE_HTTP_SESSION)
	public Set<HttpSession> getSessions()
	{
		return Collections.unmodifiableSet(sessions);
	}

	@Override
	public String getUsername(String sessionId) {
		return sessionUsers.get(sessionId);
	}

}