Class JSentinelVersionEnforcer

java.lang.Object

com.svenruppert.jsentinel.session.JSentinelVersionEnforcer

@ExperimentalJSentinelApi
public final class JSentinelVersionEnforcer
extends Object

Adapter-neutral enforcement layer on top of JSentinelVersionCheck. Adapters call enforce(...) per request with the subject + session snapshot and pattern-match on the returned JSentinelVersionEnforcer.EnforcementOutcome:

• JSentinelVersionEnforcer.EnforcementOutcome.Continue — request proceeds; the Vaadin AuthorizationListener or REST RestAuthorizationFilter runs next as usual.
• JSentinelVersionEnforcer.EnforcementOutcome.SessionStale — request must be refused. Vaadin reroutes to the login route; REST returns 401 with WWW-Authenticate: SessionStale. The enforcer has already published the audit event when this is returned.

Audit failures are swallowed — a misbehaving sink cannot turn a drift into a "Continue".

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static interface	JSentinelVersionEnforcer.EnforcementOutcome	Sealed outcome of an enforce(SubjectId, TenantId, JSentinelVersion, String, String) call.

Constructor Summary

Constructors

Constructor	Description
JSentinelVersionEnforcer(JSentinelVersionCheck check, JSentinelAuditService auditService, Clock clock)	Full constructor.
JSentinelVersionEnforcer(JSentinelVersionStore store, JSentinelAuditService auditService)

Method Summary

Modifier and Type	Method	Description
JSentinelVersionEnforcer.EnforcementOutcome	enforce(SubjectId subjectId, TenantId tenant, JSentinelVersion snapshot, String sessionId, String route)	Runs the drift check and emits a SessionStale audit event on drift.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

JSentinelVersionEnforcer

public JSentinelVersionEnforcer(JSentinelVersionStore store,
 JSentinelAuditService auditService)

Parameters:

store - version store used to derive the current value; non-null

auditService - audit sink for SessionStale events; non-null

JSentinelVersionEnforcer

public JSentinelVersionEnforcer(JSentinelVersionCheck check,
 JSentinelAuditService auditService,
 Clock clock)

Full constructor.

Parameters:

check - version check; non-null

auditService - audit sink for SessionStale events; non-null

clock - time source for the audit timestamp; non-null

Method Details

enforce

public JSentinelVersionEnforcer.EnforcementOutcome enforce(SubjectId subjectId,
 TenantId tenant,
 JSentinelVersion snapshot,
 String sessionId,
 String route)

Runs the drift check and emits a SessionStale audit event on drift.

Parameters:

subjectId - authenticated subject; non-null

tenant - tenant scope; null becomes TenantId.DEFAULT

snapshot - session's captured version; non-null

sessionId - session identifier for the audit event; may be null

route - navigation route / REST path for the audit event; may be null

Returns:

enforcement outcome