Package de.hybris.platform.servicelayer.web

Class SessionFilter

java.lang.Object

org.springframework.web.filter.GenericFilterBean

de.hybris.platform.servicelayer.web.SessionFilter

All Implemented Interfaces:

javax.servlet.Filter, org.springframework.beans.factory.Aware, org.springframework.beans.factory.BeanNameAware, org.springframework.beans.factory.DisposableBean, org.springframework.beans.factory.InitializingBean, org.springframework.context.EnvironmentAware, org.springframework.core.env.EnvironmentCapable, org.springframework.web.context.ServletContextAware

public class SessionFilter
extends org.springframework.web.filter.GenericFilterBean

This filters takes care of the session handling. Right now it still uses some Jalo classes in order to achieve this goal but in the future the complete session handling will be done "inside" the ServiceLayer.

Field Summary

Fields

Modifier and Type	Field	Description
static java.lang.String	SERIALIZATION_CHECK_RESPONSE_ERROR
static java.lang.String	SESSION_SERIALIZATION_CHECK_PROPERTY
static java.lang.String	SESSION_SERIALIZATION_EXTENSIONS_PROPERTY
static java.lang.String	TOMCAT_REPLICATION_SUPPORT

Fields inherited from class org.springframework.web.filter.GenericFilterBean

logger

Constructor Summary

Constructors

Constructor	Description
SessionFilter()

Method Summary

Modifier and Type	Method	Description
protected void	activateSession(javax.servlet.http.HttpSession httpSession, javax.servlet.http.HttpServletRequest request)	This methods first checks, if there is already a Session (JaloSession right now) attached to the httpSession.
void	afterPropertiesSet()
protected void	assureAllSessionAttributesAreSerializable(javax.servlet.http.HttpServletResponse response, javax.servlet.http.HttpSession httpSession)
protected void	deactivateSession(javax.servlet.http.HttpSession httpSession)	Deactivates the current JaloSession by calling JaloSession.deactivate().
void	doFilter(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response, javax.servlet.FilterChain filterChain)	Before the filterChain gets processed the method activateSession(HttpSession, HttpServletRequest) gets called.
protected boolean	isExtensionEnabledForSessionChecking(javax.servlet.http.HttpServletRequest request)
protected boolean	isSessionSerializationCheckEnabled(javax.servlet.http.HttpServletRequest httpRequest)
protected java.lang.Boolean	isSessionSerializationEnabled(javax.servlet.http.HttpServletRequest request)
void	setSessionService(SessionService sessionService)

Methods inherited from class org.springframework.web.filter.GenericFilterBean

addRequiredProperty, createEnvironment, destroy, getEnvironment, getFilterConfig, getFilterName, getServletContext, init, initBeanWrapper, initFilterBean, setBeanName, setEnvironment, setServletContext

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

TOMCAT_REPLICATION_SUPPORT

public static final java.lang.String TOMCAT_REPLICATION_SUPPORT

See Also:

Constant Field Values

SESSION_SERIALIZATION_CHECK_PROPERTY

public static final java.lang.String SESSION_SERIALIZATION_CHECK_PROPERTY

See Also:

Constant Field Values

SESSION_SERIALIZATION_EXTENSIONS_PROPERTY

public static final java.lang.String SESSION_SERIALIZATION_EXTENSIONS_PROPERTY

See Also:

Constant Field Values

SERIALIZATION_CHECK_RESPONSE_ERROR

public static final java.lang.String SERIALIZATION_CHECK_RESPONSE_ERROR

See Also:

Constant Field Values

Constructor Detail

SessionFilter

public SessionFilter()

Method Detail

doFilter

public void doFilter(javax.servlet.ServletRequest request,
                     javax.servlet.ServletResponse response,
                     javax.servlet.FilterChain filterChain)
              throws java.io.IOException,
                     javax.servlet.ServletException

Before the filterChain gets processed the method activateSession(HttpSession, HttpServletRequest) gets called. After the processing of the filterChain the method deactivateSession(HttpSession) gets called.

Parameters:

request - the request

response - the response

filterChain - the filterChain

Throws:

java.io.IOException

javax.servlet.ServletException

isSessionSerializationCheckEnabled

protected boolean isSessionSerializationCheckEnabled(javax.servlet.http.HttpServletRequest httpRequest)

isSessionSerializationEnabled

protected java.lang.Boolean isSessionSerializationEnabled(javax.servlet.http.HttpServletRequest request)

isExtensionEnabledForSessionChecking

protected boolean isExtensionEnabledForSessionChecking(javax.servlet.http.HttpServletRequest request)

assureAllSessionAttributesAreSerializable

protected void assureAllSessionAttributesAreSerializable(javax.servlet.http.HttpServletResponse response,
                                                         javax.servlet.http.HttpSession httpSession)

activateSession

protected void activateSession(javax.servlet.http.HttpSession httpSession,
                               javax.servlet.http.HttpServletRequest request)

This methods first checks, if there is already a Session (JaloSession right now) attached to the httpSession. If there is a attached session, this session will be activated, if there is no attached session, a new session will be created by calling SessionService.createNewSession() and the new session get assigned to the httpSession and the httpSessionId get set on the JaloSession.

Parameters:

httpSession - the session which is used

deactivateSession

protected void deactivateSession(javax.servlet.http.HttpSession httpSession)

Deactivates the current JaloSession by calling JaloSession.deactivate().

Parameters:

httpSession - only used for logging purpose right now

setSessionService

public void setSessionService(SessionService sessionService)

afterPropertiesSet

public void afterPropertiesSet()
                        throws javax.servlet.ServletException

Specified by:

afterPropertiesSet in interface org.springframework.beans.factory.InitializingBean

Overrides:

afterPropertiesSet in class org.springframework.web.filter.GenericFilterBean

Throws:

javax.servlet.ServletException