Uses of Class
io.fluxzero.idp.bff.session.BrowserHandle

Packages that use BrowserHandle

Package	Description
io.fluxzero.idp.bff.session

Uses of BrowserHandle in io.fluxzero.idp.bff.session

Methods in io.fluxzero.idp.bff.session that return BrowserHandle

Modifier and Type	Method	Description
BrowserHandle	ModelBffSessionStore.PendingLogin.callbackState()	Returns the value of the callbackState record component.
BrowserHandle	BffLoginCoordinator.LoginRedirect.cookie()	Returns the value of the cookie record component.
BrowserHandle	BffLoginCoordinator.SessionOpened.cookie()	Returns the value of the cookie record component.
BrowserHandle	ModelBffSessionStore.PendingLogin.cookie()	Returns the value of the cookie record component.
BrowserHandle	ModelBffSessionStore.RefreshClaim.cookie()	Returns the value of the cookie record component.
static BrowserHandle	BrowserHandle.create()
BrowserHandle	BffLoginCoordinator.SessionOpened.csrf()	Returns the value of the csrf record component.
BrowserHandle	BffSessionCoordinator.SessionAccess.csrf()	Returns the value of the csrf record component.
BrowserHandle	ModelBffSessionStore.openSession(String issuer, String client, String sid, SecretValue value, Duration lifetime)	issuer/client/sid must come from already verified protocol evidence, never browser selectors.

Methods in io.fluxzero.idp.bff.session that return types with arguments of type BrowserHandle

Modifier and Type	Method	Description
static Optional<BrowserHandle>	BrowserHandle.parse(String value)
Optional<BrowserHandle>	BrowserSessionBoundary.readCookie(List<String> cookieHeaders)	Duplicate or malformed cookie values are rejected, not resolved by first/last-header precedence.

Methods in io.fluxzero.idp.bff.session with parameters of type BrowserHandle

Modifier and Type	Method	Description
Optional<BffSessionCoordinator.SessionAccess>	BffSessionCoordinator.access(BrowserHandle cookie)	Empty means a fresh login is needed.
Optional<BffSessionCoordinator.SessionAccess>	BffSessionCoordinator.access(BrowserHandle cookie, Duration refreshWait)	Waits only for another consumer's confirmed refresh; never retries an uncertain token exchange.
BffLoginCoordinator.SessionOpened	BffLoginCoordinator.callback(BrowserHandle cookie, BrowserHandle state, String code, String error, String issuer)	HTTP must reject duplicate parameters before calling.
Optional<ModelBffSessionStore.RefreshClaim>	ModelBffSessionStore.claimRefresh(BrowserHandle cookie, long expectedVersion, Duration timeout)	No lease takeover: after an uncertain token rotation, reauthenticate instead of replaying the old token.
Optional<SecretValue>	ModelBffSessionStore.consumeLogin(BrowserHandle cookie, BrowserHandle callbackState)
boolean	BffLogoutCoordinator.local(BrowserHandle cookie, BrowserSessionBoundary boundary, String method, List<String> origins, List<String> csrfHeaders, String fetchSite)	Removes only this application cookie's server-side session.
boolean	BrowserSessionBoundary.permitsMutation(String method, List<String> origins, List<String> csrfHeaders, BrowserHandle expectedCsrf, String fetchSite)	A synchronizer token is generated independently and retained in the protected session payload.
Optional<BffSessionCoordinator.ResourceAccess>	BffSessionCoordinator.resourceAccess(BrowserHandle cookie, io.fluxzero.idp.client.OidcClient.ResourceTokenRequest request)	Exchanges only a current session's own credential.
void	ModelBffSessionStore.revokeSession(BrowserHandle cookie)
Optional<ModelBffSessionStore.SessionSnapshot>	ModelBffSessionStore.session(BrowserHandle cookie)
String	BrowserSessionBoundary.setCookie(BrowserHandle handle, Duration lifetime)

Constructors in io.fluxzero.idp.bff.session with parameters of type BrowserHandle

Modifier	Constructor	Description
	LoginRedirect(BrowserHandle cookie, Instant expiresAt, String authorizationUrl)	Creates an instance of a LoginRedirect record class.
	PendingLogin(BrowserHandle cookie, BrowserHandle callbackState, Instant expiresAt)	Creates an instance of a PendingLogin record class.
	RefreshClaim(BrowserHandle cookie, String claim, Instant expiresAt, Instant deadline)	Creates an instance of a RefreshClaim record class.
	SessionAccess(String issuer, String client, String subject, String sid, BrowserHandle csrf, SecretValue accessToken, Instant accessExpiresAt, Instant expiresAt, com.fasterxml.jackson.databind.JsonNode identityClaims)	Creates an instance of a SessionAccess record class.
	SessionOpened(BrowserHandle cookie, BrowserHandle csrf, Instant expiresAt, String returnPath)	Creates an instance of a SessionOpened record class.