javalin-security-session/io.github.mzlnk.javalin.security.session/SessionAuthenticator

SessionAuthenticator

class SessionAuthenticator : Authenticator

Implements session-based authentication by delegating to a SessionManager.

On each request, calls SessionManager.validate to resolve the current session details:

null → AuthenticationResult.NotAuthenticated (the request continues as anonymous)
non-null → AuthenticationResult.Success with the identity and roles

sessionManager is a required composition dependency: it fully owns how sessions are created, validated, and destroyed. The authenticator itself is storage-agnostic.

Construct via session { }, Builder, or of.

Types

Builder

class Builder(sessionManager: SessionManager)

Fluent builder for constructing a SessionAuthenticator.

Companion

object Companion

Properties

sessionManager

val sessionManager: SessionManager

The SessionManager this authenticator delegates to. Required.

Functions

authenticate

open override fun authenticate(context: Context): AuthenticationResult