Class UserSeedProperty

All Implemented Interfaces:
ExtensionPoint, Describable<UserProperty>, ReconfigurableDescribable<UserProperty>

public class UserSeedProperty extends UserProperty
The seed stored in this property is used to have a revoke feature on the session without having to hack the session management that depends on the application server used to run the instance. The seed is added to the session when a user just logged in and then for every request, before using the session information, we check the seed was not changed in the meantime. This feature allows the admin to revoke all the sessions that are in the wild without having to keep a list of them.
See Also:
  • Field Details


      @Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class) public static boolean DISABLE_USER_SEED
      Escape hatch for User seed based revocation feature. If we disable the seed, we can still use it to write / store information but not verifying the data using it.

      @Restricted(org.kohsuke.accmod.restrictions.NoExternalUse.class) public static boolean HIDE_USER_SEED_SECTION
      Hide the user seed section from the UI to prevent accidental use

      public static final String USER_SESSION_SEED
      See Also:
  • Method Details

    • getSeed

      @NonNull public String getSeed()
    • renewSeed

      public void renewSeed()