Package org.keycloak.models.sessions.infinispan

Class InfinispanUserSessionProvider

java.lang.Object

org.keycloak.models.sessions.infinispan.InfinispanUserSessionProvider

All Implemented Interfaces:

ClientSessionManager, SessionRefreshStore, UserSessionProvider, Provider

public class InfinispanUserSessionProvider
extends Object
implements UserSessionProvider, SessionRefreshStore, ClientSessionManager

Author:

Stian Thorgersen

Field Summary

Fields

Modifier and Type	Field	Description
protected final InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity>	clientSessionTx
protected final SessionEventsSenderTransaction	clusterEventsSenderTx
protected final InfinispanKeyGenerator	keyGenerator
protected final SessionFunction<AuthenticatedClientSessionEntity>	offlineClientSessionCacheEntryLifespanAdjuster
protected final InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity>	offlineClientSessionTx
protected final SessionFunction<UserSessionEntity>	offlineSessionCacheEntryLifespanAdjuster
protected final InfinispanChangelogBasedTransaction<String,UserSessionEntity>	offlineSessionTx
protected final PersisterLastSessionRefreshStore	persisterLastSessionRefreshStore
protected final KeycloakSession	session
protected final InfinispanChangelogBasedTransaction<String,UserSessionEntity>	sessionTx

Constructor Summary

Constructors

Constructor

Description

InfinispanUserSessionProvider(KeycloakSession session, PersisterLastSessionRefreshStore persisterLastSessionRefreshStore, InfinispanKeyGenerator keyGenerator, InfinispanChangelogBasedTransaction<String,UserSessionEntity> sessionTx, InfinispanChangelogBasedTransaction<String,UserSessionEntity> offlineSessionTx, InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> clientSessionTx, InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> offlineClientSessionTx, SessionFunction<UserSessionEntity> offlineSessionCacheEntryLifespanAdjuster, SessionFunction<AuthenticatedClientSessionEntity> offlineClientSessionCacheEntryLifespanAdjuster)

Method Summary

Modifier and Type	Method	Description
void	addChange(EmbeddedClientSessionKey key, PersistentSessionUpdateTask<AuthenticatedClientSessionEntity> task)	Adds a update task to the changelog for a specific client session.
void	close()
AuthenticatedClientSessionModel	createClientSession(RealmModel realm, ClientModel client, UserSessionModel userSession)
AuthenticatedClientSessionModel	createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)	Will automatically attach newly created offline client session to the offlineUserSession
UserSessionModel	createOfflineUserSession(UserSessionModel userSession)	Newly created userSession won't contain attached AuthenticatedClientSessions
UserSessionModel	createUserSession(String id, RealmModel realm, UserModel user, String loginUsername, String ipAddress, String authMethod, boolean rememberMe, String brokerSessionId, String brokerUserId, UserSessionModel.SessionPersistenceState persistenceState)	Creates a new user session with the given parameters.
Map<String,Long>	getActiveClientSessionStats(RealmModel realm, boolean offline)	Returns a summary of client sessions key is client.getId()
long	getActiveUserSessions(RealmModel realm, ClientModel client)
protected org.infinispan.Cache<String,SessionEntityWrapper<UserSessionEntity>>	getCache(boolean offline)
AuthenticatedClientSessionAdapter	getClientSession(UserSessionModel userSession, ClientModel client, boolean offline)	Gets the authenticated client session for a given user session and client.
protected org.infinispan.Cache<EmbeddedClientSessionKey,SessionEntityWrapper<AuthenticatedClientSessionEntity>>	getClientSessionCache(boolean offline)
protected InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity>	getClientSessionTransaction(boolean offline)
KeycloakSession	getKeycloakSession()	Returns currently used Keycloak session.
long	getOfflineSessionsCount(RealmModel realm, ClientModel client)
UserSessionAdapter<InfinispanUserSessionProvider>	getOfflineUserSession(RealmModel realm, String userSessionId)
Stream<UserSessionModel>	getOfflineUserSessionByBrokerUserIdStream(RealmModel realm, String brokerUserId)	Obtains the offline user sessions associated with the user that matches the specified brokerUserId.
Stream<UserSessionModel>	getOfflineUserSessionsStream(RealmModel realm, ClientModel client, Integer first, Integer max)	Obtains the offline user sessions associated with the specified client, starting from the firstResult and containing at most maxResults.
Stream<UserSessionModel>	getOfflineUserSessionsStream(RealmModel realm, UserModel user)	Obtains the offline user sessions associated with the specified user.
PersisterLastSessionRefreshStore	getPersisterLastSessionRefreshStore()
int	getStartupTime(RealmModel realm)
protected InfinispanChangelogBasedTransaction<String,UserSessionEntity>	getTransaction(boolean offline)
UserSessionModel	getUserSession(RealmModel realm, String id)
protected UserSessionAdapter<InfinispanUserSessionProvider>	getUserSession(RealmModel realm, String id, boolean offline)
UserSessionModel	getUserSessionByBrokerSessionId(RealmModel realm, String brokerSessionId)
Stream<UserSessionModel>	getUserSessionByBrokerUserIdStream(RealmModel realm, String brokerUserId)	Obtains the online user sessions associated with the user that matches the specified brokerUserId.
protected long	getUserSessionsCount(RealmModel realm, ClientModel client, boolean offline)
Stream<UserSessionModel>	getUserSessionsStream(RealmModel realm, ClientModel client)	Obtains the online user sessions associated with the specified client.
Stream<UserSessionModel>	getUserSessionsStream(RealmModel realm, ClientModel client, Integer firstResult, Integer maxResults)	Obtains the online user sessions associated with the specified client, starting from the firstResult and containing at most maxResults.
protected Stream<UserSessionModel>	getUserSessionsStream(RealmModel realm, ClientModel client, Integer firstResult, Integer maxResults, boolean offline)
protected Stream<UserSessionModel>	getUserSessionsStream(RealmModel realm, UserSessionPredicate predicate, boolean offline)
Stream<UserSessionModel>	getUserSessionsStream(RealmModel realm, UserModel user)	Obtains the online user sessions associated with the specified user.
UserSessionModel	getUserSessionWithPredicate(RealmModel realm, String id, boolean offline, Predicate<UserSessionModel> predicate)	Return userSession of specified ID as long as the predicate passes.
protected UserSessionAdapter<InfinispanUserSessionProvider>	importUserSession(UserSessionModel userSession)
void	importUserSessions(Collection<UserSessionModel> persistentUserSessions, boolean offline)	Deprecated, for removal: This API element is subject to removal in a future version.
void	migrate(String modelVersion)
void	onClientRemoved(RealmModel realm, ClientModel client)	Callback method invoked when a client is removed.
void	onRealmRemoved(RealmModel realm)	Callback method invoked when a realm is removed.
protected void	onRealmRemovedEvent(String realmId)
protected void	onRemoveUserSessionsEvent(String realmId)
protected void	onUserRemoved(RealmModel realm, UserModel user)
void	removeAllExpired()	Remove expired user sessions and client sessions in all the realms
void	removeExpired(RealmModel realm)	Removes expired user sessions owned by this realm from this provider.
void	removeLocalUserSessions(String realmId, boolean offline)
void	removeOfflineUserSession(RealmModel realm, UserSessionModel userSession)	Removes the attached clientSessions as well
void	removeUserSession(RealmModel realm, UserSessionModel session)	This will remove attached ClientLoginSessionModels too
protected void	removeUserSession(UserSessionEntity sessionEntity, boolean offline)
void	removeUserSessions(RealmModel realm)	Removes all user sessions (regular and offline) from the specified realm.
void	removeUserSessions(RealmModel realm, UserModel user)
protected void	removeUserSessions(RealmModel realm, UserModel user, boolean offline)
void	restartEntity(EmbeddedClientSessionKey key, PersistentSessionUpdateTask<AuthenticatedClientSessionEntity> task)	Resets and replaces the state of the persisted AuthenticatedClientSessionEntity for the given session.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.models.UserSessionProvider

createUserSession, getClientSession, getClientSession, getUserSessionIfClientExists

Field Details

session

protected final KeycloakSession session

sessionTx

protected final InfinispanChangelogBasedTransaction<String,UserSessionEntity> sessionTx

offlineSessionTx

protected final InfinispanChangelogBasedTransaction<String,UserSessionEntity> offlineSessionTx

clientSessionTx

protected final InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> clientSessionTx

offlineClientSessionTx

protected final InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> offlineClientSessionTx

clusterEventsSenderTx

protected final SessionEventsSenderTransaction clusterEventsSenderTx

persisterLastSessionRefreshStore

protected final PersisterLastSessionRefreshStore persisterLastSessionRefreshStore

keyGenerator

protected final InfinispanKeyGenerator keyGenerator

offlineSessionCacheEntryLifespanAdjuster

protected final SessionFunction<UserSessionEntity> offlineSessionCacheEntryLifespanAdjuster

offlineClientSessionCacheEntryLifespanAdjuster

protected final SessionFunction<AuthenticatedClientSessionEntity> offlineClientSessionCacheEntryLifespanAdjuster

Constructor Details

InfinispanUserSessionProvider

public InfinispanUserSessionProvider(KeycloakSession session,
 PersisterLastSessionRefreshStore persisterLastSessionRefreshStore,
 InfinispanKeyGenerator keyGenerator,
 InfinispanChangelogBasedTransaction<String,UserSessionEntity> sessionTx,
 InfinispanChangelogBasedTransaction<String,UserSessionEntity> offlineSessionTx,
 InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> clientSessionTx,
 InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> offlineClientSessionTx,
 SessionFunction<UserSessionEntity> offlineSessionCacheEntryLifespanAdjuster,
 SessionFunction<AuthenticatedClientSessionEntity> offlineClientSessionCacheEntryLifespanAdjuster)

Method Details

getCache

protected org.infinispan.Cache<String,SessionEntityWrapper<UserSessionEntity>> getCache(boolean offline)

getTransaction

protected InfinispanChangelogBasedTransaction<String,UserSessionEntity> getTransaction(boolean offline)

getClientSessionCache

protected org.infinispan.Cache<EmbeddedClientSessionKey,SessionEntityWrapper<AuthenticatedClientSessionEntity>> getClientSessionCache(boolean offline)

getClientSessionTransaction

protected InfinispanChangelogBasedTransaction<EmbeddedClientSessionKey,AuthenticatedClientSessionEntity> getClientSessionTransaction(boolean offline)

getPersisterLastSessionRefreshStore

public PersisterLastSessionRefreshStore getPersisterLastSessionRefreshStore()

Specified by:

getPersisterLastSessionRefreshStore in interface SessionRefreshStore

getKeycloakSession

public KeycloakSession getKeycloakSession()

Description copied from interface: UserSessionProvider

Returns currently used Keycloak session.

Specified by:

getKeycloakSession in interface UserSessionProvider

Returns:

KeycloakSession

createClientSession

public AuthenticatedClientSessionModel createClientSession(RealmModel realm,
 ClientModel client,
 UserSessionModel userSession)

Specified by:

createClientSession in interface UserSessionProvider

createUserSession

public UserSessionModel createUserSession(String id,
 RealmModel realm,
 UserModel user,
 String loginUsername,
 String ipAddress,
 String authMethod,
 boolean rememberMe,
 String brokerSessionId,
 String brokerUserId,
 UserSessionModel.SessionPersistenceState persistenceState)

Description copied from interface: UserSessionProvider

Creates a new user session with the given parameters.

Specified by:

createUserSession in interface UserSessionProvider

Parameters:

id - identifier. Is generated if null

realm - the realm

user - user associated with the created user session

Returns:

Model of the created user session

getUserSession

public UserSessionModel getUserSession(RealmModel realm,
 String id)

Specified by:

getUserSession in interface UserSessionProvider

migrate

public void migrate(String modelVersion)

Specified by:

migrate in interface UserSessionProvider

getUserSession

protected UserSessionAdapter<InfinispanUserSessionProvider> getUserSession(RealmModel realm,
 String id,
 boolean offline)

getUserSessionsStream

protected Stream<UserSessionModel> getUserSessionsStream(RealmModel realm,
 UserSessionPredicate predicate,
 boolean offline)

getClientSession

public AuthenticatedClientSessionAdapter getClientSession(UserSessionModel userSession,
 ClientModel client,
 boolean offline)

Description copied from interface: UserSessionProvider

Gets the authenticated client session for a given user session and client.

Specified by:

getClientSession in interface UserSessionProvider

Parameters:

userSession - The user's session model.

client - The client model.

offline - If true, retrieves the offline session; otherwise, retrieves the online session.

Returns:

The authenticated client session, or null if it doesn't exist.

getUserSessionsStream

public Stream<UserSessionModel> getUserSessionsStream(RealmModel realm,
 UserModel user)

Description copied from interface: UserSessionProvider

Obtains the online user sessions associated with the specified user.

Specified by:

getUserSessionsStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

user - the user whose sessions are being searched.

Returns:

a non-null Stream of online user sessions.

getUserSessionByBrokerUserIdStream

public Stream<UserSessionModel> getUserSessionByBrokerUserIdStream(RealmModel realm,
 String brokerUserId)

Description copied from interface: UserSessionProvider

Obtains the online user sessions associated with the user that matches the specified brokerUserId.

Specified by:

getUserSessionByBrokerUserIdStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

brokerUserId - the id of the broker user whose sessions are being searched.

Returns:

a non-null Stream of online user sessions.

getUserSessionByBrokerSessionId

public UserSessionModel getUserSessionByBrokerSessionId(RealmModel realm,
 String brokerSessionId)

Specified by:

getUserSessionByBrokerSessionId in interface UserSessionProvider

getUserSessionsStream

public Stream<UserSessionModel> getUserSessionsStream(RealmModel realm,
 ClientModel client)

Description copied from interface: UserSessionProvider

Obtains the online user sessions associated with the specified client.

Specified by:

getUserSessionsStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

client - the client whose user sessions are being searched.

Returns:

a non-null Stream of online user sessions.

getUserSessionsStream

public Stream<UserSessionModel> getUserSessionsStream(RealmModel realm,
 ClientModel client,
 Integer firstResult,
 Integer maxResults)

Description copied from interface: UserSessionProvider

Obtains the online user sessions associated with the specified client, starting from the firstResult and containing at most maxResults.

Specified by:

getUserSessionsStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

client - the client whose user sessions are being searched.

firstResult - first result to return. Ignored if negative or null.

maxResults - maximum number of results to return. Ignored if negative or null.

Returns:

a non-null Stream of online user sessions.

getUserSessionsStream

protected Stream<UserSessionModel> getUserSessionsStream(RealmModel realm,
 ClientModel client,
 Integer firstResult,
 Integer maxResults,
 boolean offline)

getUserSessionWithPredicate

public UserSessionModel getUserSessionWithPredicate(RealmModel realm,
 String id,
 boolean offline,
 Predicate<UserSessionModel> predicate)

Description copied from interface: UserSessionProvider

Return userSession of specified ID as long as the predicate passes. Otherwise, returns null. If predicate doesn't pass, implementation can do some best-effort actions to try to have predicate passing (e.g. download userSession from other DC)

Specified by:

getUserSessionWithPredicate in interface UserSessionProvider

getActiveUserSessions

public long getActiveUserSessions(RealmModel realm,
 ClientModel client)

Specified by:

getActiveUserSessions in interface UserSessionProvider

getActiveClientSessionStats

public Map<String,Long> getActiveClientSessionStats(RealmModel realm,
 boolean offline)

Description copied from interface: UserSessionProvider

Returns a summary of client sessions key is client.getId()

Specified by:

getActiveClientSessionStats in interface UserSessionProvider

Returns:

getUserSessionsCount

protected long getUserSessionsCount(RealmModel realm,
 ClientModel client,
 boolean offline)

removeUserSession

public void removeUserSession(RealmModel realm,
 UserSessionModel session)

Description copied from interface: UserSessionProvider

This will remove attached ClientLoginSessionModels too

Specified by:

removeUserSession in interface UserSessionProvider

removeUserSessions

public void removeUserSessions(RealmModel realm,
 UserModel user)

Specified by:

removeUserSessions in interface UserSessionProvider

removeUserSessions

protected void removeUserSessions(RealmModel realm,
 UserModel user,
 boolean offline)

removeAllExpired

public void removeAllExpired()

Description copied from interface: UserSessionProvider

Remove expired user sessions and client sessions in all the realms

Specified by:

removeAllExpired in interface UserSessionProvider

removeExpired

public void removeExpired(RealmModel realm)

Description copied from interface: UserSessionProvider

Removes expired user sessions owned by this realm from this provider. If this `UserSessionProvider` uses `UserSessionPersister`, the removal of the expired user sessions is also propagated to relevant `UserSessionPersister`.

Specified by:

removeExpired in interface UserSessionProvider

Parameters:

realm - RealmModel Realm where all the expired user sessions to be removed from.

removeUserSessions

public void removeUserSessions(RealmModel realm)

Description copied from interface: UserSessionProvider

Removes all user sessions (regular and offline) from the specified realm.

Specified by:

removeUserSessions in interface UserSessionProvider

Parameters:

realm - the realm whose sessions are to be removed.

onRemoveUserSessionsEvent

protected void onRemoveUserSessionsEvent(String realmId)

removeLocalUserSessions

public void removeLocalUserSessions(String realmId,
 boolean offline)

onRealmRemoved

public void onRealmRemoved(RealmModel realm)

Description copied from interface: UserSessionProvider

Callback method invoked when a realm is removed. Implementations should clear any sessions associated with the removed realm.

Specified by:

onRealmRemoved in interface UserSessionProvider

Parameters:

realm - a reference to the realm being removed.

onRealmRemovedEvent

protected void onRealmRemovedEvent(String realmId)

onClientRemoved

public void onClientRemoved(RealmModel realm,
 ClientModel client)

Description copied from interface: UserSessionProvider

Callback method invoked when a client is removed. Implementations should clear any sessions associated with the removed client.

Specified by:

onClientRemoved in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

client - a reference to the client being removed.

onUserRemoved

protected void onUserRemoved(RealmModel realm,
 UserModel user)

close

public void close()

Specified by:

close in interface Provider

Specified by:

close in interface UserSessionProvider

getStartupTime

public int getStartupTime(RealmModel realm)

Specified by:

getStartupTime in interface UserSessionProvider

removeUserSession

protected void removeUserSession(UserSessionEntity sessionEntity,
 boolean offline)

createOfflineUserSession

public UserSessionModel createOfflineUserSession(UserSessionModel userSession)

Description copied from interface: UserSessionProvider

Newly created userSession won't contain attached AuthenticatedClientSessions

Specified by:

createOfflineUserSession in interface UserSessionProvider

getOfflineUserSession

public UserSessionAdapter<InfinispanUserSessionProvider> getOfflineUserSession(RealmModel realm,
 String userSessionId)

Specified by:

getOfflineUserSession in interface UserSessionProvider

getOfflineUserSessionByBrokerUserIdStream

public Stream<UserSessionModel> getOfflineUserSessionByBrokerUserIdStream(RealmModel realm,
 String brokerUserId)

Description copied from interface: UserSessionProvider

Obtains the offline user sessions associated with the user that matches the specified brokerUserId.

Specified by:

getOfflineUserSessionByBrokerUserIdStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

brokerUserId - the id of the broker user whose sessions are being searched.

Returns:

a non-null Stream of offline user sessions.

removeOfflineUserSession

public void removeOfflineUserSession(RealmModel realm,
 UserSessionModel userSession)

Description copied from interface: UserSessionProvider

Removes the attached clientSessions as well

Specified by:

removeOfflineUserSession in interface UserSessionProvider

createOfflineClientSession

public AuthenticatedClientSessionModel createOfflineClientSession(AuthenticatedClientSessionModel clientSession,
 UserSessionModel offlineUserSession)

Description copied from interface: UserSessionProvider

Will automatically attach newly created offline client session to the offlineUserSession

Specified by:

createOfflineClientSession in interface UserSessionProvider

getOfflineUserSessionsStream

public Stream<UserSessionModel> getOfflineUserSessionsStream(RealmModel realm,
 UserModel user)

Description copied from interface: UserSessionProvider

Obtains the offline user sessions associated with the specified user.

Specified by:

getOfflineUserSessionsStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

user - the user whose offline sessions are being searched.

Returns:

a non-null Stream of offline user sessions.

getOfflineSessionsCount

public long getOfflineSessionsCount(RealmModel realm,
 ClientModel client)

Specified by:

getOfflineSessionsCount in interface UserSessionProvider

getOfflineUserSessionsStream

public Stream<UserSessionModel> getOfflineUserSessionsStream(RealmModel realm,
 ClientModel client,
 Integer first,
 Integer max)

Description copied from interface: UserSessionProvider

Obtains the offline user sessions associated with the specified client, starting from the firstResult and containing at most maxResults.

Specified by:

getOfflineUserSessionsStream in interface UserSessionProvider

Parameters:

realm - a reference to the realm.

client - the client whose user sessions are being searched.

first - first result to return. Ignored if negative or null.

max - maximum number of results to return. Ignored if negative or null.

Returns:

a non-null Stream of offline user sessions.

importUserSessions

@Deprecated(forRemoval=true,
            since="25.0")
public void importUserSessions(Collection<UserSessionModel> persistentUserSessions,
 boolean offline)

Deprecated, for removal: This API element is subject to removal in a future version.

Description copied from interface: UserSessionProvider

Triggered by persister during pre-load. It imports authenticatedClientSessions too.

Specified by:

importUserSessions in interface UserSessionProvider

importUserSession

protected UserSessionAdapter<InfinispanUserSessionProvider> importUserSession(UserSessionModel userSession)

addChange

public void addChange(EmbeddedClientSessionKey key,
 PersistentSessionUpdateTask<AuthenticatedClientSessionEntity> task)

Description copied from interface: ClientSessionManager

Adds a update task to the changelog for a specific client session.

When the transaction commits, this task will apply its changes to the persisted AuthenticatedClientSessionEntity, effectively updating the corresponding AuthenticatedClientSessionModel. Multiple addChange calls for the same session are accumulated (merged).

Specified by:

addChange in interface ClientSessionManager

Parameters:

key - The identifier for the target client session.

task - The operation containing the changes to apply to the persisted entity.

restartEntity

public void restartEntity(EmbeddedClientSessionKey key,
 PersistentSessionUpdateTask<AuthenticatedClientSessionEntity> task)

Description copied from interface: ClientSessionManager

Resets and replaces the state of the persisted AuthenticatedClientSessionEntity for the given session.

All previously added changes via addChange for this session are discarded, and the provided task is executed to set the new state of the client session entity.

Specified by:

restartEntity in interface ClientSessionManager

Parameters:

key - The identifier for the target client session.

task - The operation that must set the complete new state of the persisted entity.