Enum Class SessionHandlingDecision

java.lang.Object
java.lang.Enum<SessionHandlingDecision>
com.svenruppert.jsentinel.credential.change.SessionHandlingDecision
All Implemented Interfaces:
Serializable, Comparable<SessionHandlingDecision>, Constable

public enum SessionHandlingDecision extends Enum<SessionHandlingDecision>
Adapter-neutral instruction returned after a successful password change. Adapters (Vaadin / REST / Standalone) map this to a concrete session lifecycle action.

The default decision is INVALIDATE_OTHER_SESSIONS — the new credential should not extend the lifetime of sessions that were authenticated with the old one (CWE-613).

  • Enum Constant Details

    • INVALIDATE_OTHER_SESSIONS

      public static final SessionHandlingDecision INVALIDATE_OTHER_SESSIONS
      Keep the current session; invalidate every other active session.
    • KEEP_SESSIONS

      public static final SessionHandlingDecision KEEP_SESSIONS
      Keep every session. Reserved for cases where the operator explicitly tolerates parallel sessions (e.g. operator-driven change without re-authentication).
  • Method Details

    • values

      public static SessionHandlingDecision[] values()
      Returns an array containing the constants of this enum class, in the order they are declared.
      Returns:
      an array containing the constants of this enum class, in the order they are declared
    • valueOf

      public static SessionHandlingDecision valueOf(String name)
      Returns the enum constant of this class with the specified name. The string must match exactly an identifier used to declare an enum constant in this class. (Extraneous whitespace characters are not permitted.)
      Parameters:
      name - the name of the enum constant to be returned.
      Returns:
      the enum constant with the specified name
      Throws:
      IllegalArgumentException - if this enum class has no constant with the specified name
      NullPointerException - if the argument is null