CODEWITHSUNDEEP
apachevalidationsessionshiro
user3243499
user3243499

Reputation: 3151

How to validate session ID if I know the session ID in Apache Shiro without the use of any hash maps?

I know that the session ID can be validated using hashmap and attaching it to a listener. Also there was a deprecated method to validate using only the session ID string.

I want to know is there an alternative way to validate the known session ID in Apache Shiro without the use of any hashmaps?

Upvotes: 1

Views: 1948

Answers (1)

Utkal Sinha
Utkal Sinha

Reputation: 1041

An alternate solution would be to create the subject using the passed session ID and then trying to get the session of that subject. If a session exist then it will return its session else null. For example, below method can be used to validate an Apache Shiro's session using a passed session ID.

 public static boolean isSessionValid(String sessionId){  
      Subject requestedSubject = new Subject.Builder().sessionId(sessionId).buildSubject();
      return !(requestedSubject.getSession(false) == null);
  }

Upvotes: 1

Related Questions