SessionToken#

public class SessionToken extends SelfValidatingAuthenticationToken#

Session tokens are formatted as JSON arrays with the following elements:

  • Anything but “O” (upper-case “o”), preferred is “S”.

  • Realm

  • name within the Realm

  • list of roles

  • list of permissions

  • time of token generation (long, ms since 1970)

  • validity duration (long, ms)

  • salt

  • checksum

Constructors#

SessionToken#

public SessionToken(Principal principal, long date, long timeout, String salt, String checksum, String[] permissions, String[] roles)#

SessionToken#

public SessionToken(Principal principal, long timeout, String[] permissions, String[] roles)#

Methods#

calcChecksum#

public String calcChecksum(String pepper)#

generate#

public static SessionToken generate(Subject subject)#

parse#

public static SessionToken parse(Object[] array)#

setFields#

protected void setFields(Object[] fields)#

Nothing to set in this implemention.

toString#

public String toString()#