Class ModelBffSessionStore

java.lang.Object

io.fluxzero.idp.bff.session.ModelBffSessionStore

public final class ModelBffSessionStore
extends Object

Reusable application-session lifecycle, independent of IDP management, tenants and user mapping. Use only inside an approved protected/in-process HTTP boundary. Model values are encrypted by default; plaintext requires explicit opt-in. In either mode, explicit commit completion precedes releasing a one-time login or refresh capability.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final record	ModelBffSessionStore.PendingLogin
static final record	ModelBffSessionStore.RefreshClaim
static final record	ModelBffSessionStore.SessionSnapshot

Constructor Summary

Constructors

Constructor	Description
ModelBffSessionStore(String application, SessionProtection protection)

Method Summary

Modifier and Type	Method	Description
ModelBffSessionStore.PendingLogin	beginLogin(SecretValue state, Duration lifetime)
Optional<ModelBffSessionStore.RefreshClaim>	claimRefresh(BrowserHandle cookie, long expectedVersion, Duration timeout)	No lease takeover: after an uncertain token rotation, reauthenticate instead of replaying the old token.
boolean	completeRefresh(ModelBffSessionStore.RefreshClaim claim, SecretValue value)
Optional<SecretValue>	consumeLogin(BrowserHandle cookie, BrowserHandle callbackState)
BrowserHandle	openSession(String issuer, String client, String sid, SecretValue value, Duration lifetime)	issuer/client/sid must come from already verified protocol evidence, never browser selectors.
void	revokeRelyingPartySession(String issuer, String client, String sid)	Only call after validating signature, issuer, audience, iat, jti and logout events.
void	revokeSession(BrowserHandle cookie)
Optional<ModelBffSessionStore.SessionSnapshot>	session(BrowserHandle cookie)
static ModelBffSessionStore	unencrypted(String application)	Deliberate opt-out from encryption at rest.

Methods inherited from class Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ModelBffSessionStore

public ModelBffSessionStore(String application,
 SessionProtection protection)

Method Details

unencrypted

public static ModelBffSessionStore unencrypted(String application)

Deliberate opt-out from encryption at rest. All replicas must use the same mode.

beginLogin

public ModelBffSessionStore.PendingLogin beginLogin(SecretValue state,
 Duration lifetime)

consumeLogin

public Optional<SecretValue> consumeLogin(BrowserHandle cookie,
 BrowserHandle callbackState)

openSession

public BrowserHandle openSession(String issuer,
 String client,
 String sid,
 SecretValue value,
 Duration lifetime)

issuer/client/sid must come from already verified protocol evidence, never browser selectors.

session

public Optional<ModelBffSessionStore.SessionSnapshot> session(BrowserHandle cookie)

claimRefresh

public Optional<ModelBffSessionStore.RefreshClaim> claimRefresh(BrowserHandle cookie,
 long expectedVersion,
 Duration timeout)

No lease takeover: after an uncertain token rotation, reauthenticate instead of replaying the old token.

completeRefresh

public boolean completeRefresh(ModelBffSessionStore.RefreshClaim claim,
 SecretValue value)

revokeSession

public void revokeSession(BrowserHandle cookie)

revokeRelyingPartySession

public void revokeRelyingPartySession(String issuer,
 String client,
 String sid)

Only call after validating signature, issuer, audience, iat, jti and logout events.