Class MockAuthSessionController

java.lang.Object
io.leandev.appfuse.security.auth.mock.MockAuthSessionController
@RestController @ConditionalOnProperty(prefix="app.msw", name="enabled", havingValue="true") @RequestMapping("/api/v1/auth/__mock-session") public class MockAuthSessionController extends Object

Native HTTP adapter for process-scoped MSW authentication sessions.

The browser receives only an HttpOnly cookie. Session metadata and credential hashes live in the host process through the framework RefreshSessionStore SPI, so a page reload cannot erase them. Applications must explicitly compose this controller; the framework does not auto-configure it. Do not rely on broad component scanning for this package: RestController only makes an explicitly created bean visible to Spring MVC. The condition prevents an inactive mock adapter from being constructed by an accidental scan; register inMemory() or inMemory(String) from a mock-only configuration instead.

  • Field Details

  • Method Details

    • inMemory

      public static MockAuthSessionController inMemory()
      建立採框架預設 Cookie 名稱、生命週期綁定目前 host process 的 in-memory adapter。

    • inMemory

      public static MockAuthSessionController inMemory(String cookieName)
      建立可覆寫 Cookie 名稱的 in-memory adapter；產品 credential 仍不會進入 Browser storage。 若 Vite mock adapter 也覆寫 Cookie 名稱，兩端必須傳入同一值。

    • issue

      @PostMapping("/issue") public org.springframework.http.ResponseEntity<Map<String,Object>> issue(@RequestBody MockAuthSessionController.IssueRequest input, jakarta.servlet.http.HttpServletRequest request)

    • refresh

      @PostMapping("/refresh") public org.springframework.http.ResponseEntity<Map<String,Object>> refresh(jakarta.servlet.http.HttpServletRequest request)

    • replace

      @PostMapping("/replace") public org.springframework.http.ResponseEntity<Map<String,Object>> replace(@RequestBody MockAuthSessionController.IssueRequest input, jakarta.servlet.http.HttpServletRequest request)

    • revoke

      @PostMapping("/revoke") public org.springframework.http.ResponseEntity<Map<String,Object>> revoke(@RequestBody(required=false) MockAuthSessionController.RevokeRequest input, jakarta.servlet.http.HttpServletRequest request)