Interface SessionDecision

All Known Implementing Classes:
SessionDecision.Continue, SessionDecision.Invalidate, SessionDecision.RequireLogin

public sealed interface SessionDecision permits SessionDecision.Continue, SessionDecision.RequireLogin, SessionDecision.Invalidate
Outcome of a SessionPolicy.beforeNavigation(SessionContext) decision.

Adapters interpret the result:

  • SessionDecision.Continue — let the navigation proceed.
  • SessionDecision.RequireLogin — drop the subject (if any) and forward to loginRoute. Used for "your session has expired — sign in again" situations.
  • SessionDecision.Invalidate — drop the subject, invalidate the session (HTTP / Vaadin), and forward to loginRoute. Used when the policy actively wants to destroy the session, not just force re-authentication.