Class HumanSessionResponse
java.lang.Object
co.ankatech.keymanagement.client.auth.model.HumanSessionResponse
@Generated(value="org.openapitools.codegen.languages.JavaClientCodegen",
comments="Generator version: 7.23.0")
public class HumanSessionResponse
extends Object
One live sign-in session of a person. A session begins at a sign-in, keeps its identifier across every refresh and tenant switch, and ends when it is revoked or logged out, when it stays inactive for longer than its inactivity window, or at its absolute expiry. No token is shown.
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic classstatic enumThe kind of the identity provider that authenticated the person. -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final String -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionabsoluteExpiresAt(OffsetDateTime absoluteExpiresAt) addMethodsItem(String methodsItem) authTime(OffsetDateTime authTime) breakGlass(Boolean breakGlass) clientAddress(String clientAddress) createdAt(OffsetDateTime createdAt) booleanstatic HumanSessionResponseCreate an instance of HumanSessionResponse given an JSON stringThe instant after which the session ends whatever its activity (RFC 3339): its beginning plus the configured absolute session lifetime.Who authenticated the person: `LOCAL` for a password sign-in to the platform, otherwise the identifier of the identity provider.When the person authenticated (RFC 3339).Whether the session is a break-glass session: opened through the emergency-access entry by a designated break-glass member with a security key or a device-bound passkey.The client address the sign-in came from, as the platform resolved it.When the session began (RFC 3339).Whether the request that listed the session came from it.The kind of the identity provider that authenticated the person.The wire value ofidpKind: what the server sent, verbatim.The session's last sign-in or refresh (RFC 3339).The authentication method references of the sign-in (RFC 8176), as the session's access tokens carry them in `amr`: `pwd` for a password; what the identity provider asserted for a federated sign-in.Whether the session is remembered: its refresh cookie is persistent and the longer Remember Me inactivity window applies, never past the absolute expiry.The session's identifier.The tenant the session is currently in: the tenant of its last sign-in, tenant selection or tenant switch.The user agent of the sign-in.inthashCode()idpKind(HumanSessionResponse.IdpKindEnum idpKind) lastActivityAt(OffsetDateTime lastActivityAt) rememberMe(Boolean rememberMe) voidsetAbsoluteExpiresAt(OffsetDateTime absoluteExpiresAt) voidsetAuthority(String authority) voidsetAuthTime(OffsetDateTime authTime) voidsetBreakGlass(Boolean breakGlass) voidsetClientAddress(String clientAddress) voidsetCreatedAt(OffsetDateTime createdAt) voidsetCurrent(Boolean current) voidvoidsetLastActivityAt(OffsetDateTime lastActivityAt) voidsetMethods(List<String> methods) voidsetRememberMe(Boolean rememberMe) voidsetSessionId(UUID sessionId) voidsetTenantId(UUID tenantId) voidsetUserAgent(String userAgent) toJson()Convert an instance of HumanSessionResponse to an JSON stringtoString()static voidvalidateJsonElement(com.google.gson.JsonElement jsonElement) Validates the JSON Element and throws an exception if issues foundstatic voidvalidateJsonElementAsCandidate(com.google.gson.JsonElement jsonElement) Validates the JSON Element as a candidate of a oneOf schema: the checks ofvalidateJsonElement(JsonElement), and the element carries no member this model does not declare.
-
Field Details
-
SERIALIZED_NAME_SESSION_ID
- See Also:
-
SERIALIZED_NAME_TENANT_ID
- See Also:
-
SERIALIZED_NAME_AUTH_TIME
- See Also:
-
SERIALIZED_NAME_AUTHORITY
- See Also:
-
SERIALIZED_NAME_IDP_KIND
- See Also:
-
SERIALIZED_NAME_METHODS
- See Also:
-
SERIALIZED_NAME_CREATED_AT
- See Also:
-
SERIALIZED_NAME_LAST_ACTIVITY_AT
- See Also:
-
SERIALIZED_NAME_ABSOLUTE_EXPIRES_AT
- See Also:
-
SERIALIZED_NAME_REMEMBER_ME
- See Also:
-
SERIALIZED_NAME_CLIENT_ADDRESS
- See Also:
-
SERIALIZED_NAME_USER_AGENT
- See Also:
-
SERIALIZED_NAME_CURRENT
- See Also:
-
SERIALIZED_NAME_BREAK_GLASS
- See Also:
-
openapiFields
-
openapiRequiredFields
-
-
Constructor Details
-
HumanSessionResponse
public HumanSessionResponse()
-
-
Method Details
-
getIdpKindAsString
The wire value ofidpKind: what the server sent, verbatim.- For a value this release declares, the same wire value the enum names.
- For a value it does not declare (one a later server added), the server's wire value verbatim,
while
getIdpKind()readsUNKNOWN_DEFAULT_OPEN_API; writing this model sends that wire value back, never the sentinel. - For an absent member,
null.
- Returns:
- the wire value, or
nullwhen the member is absent
-
sessionId
-
getSessionId
The session's identifier. The access tokens of the session carry it as the `sid` claim.- Returns:
- sessionId
-
setSessionId
-
tenantId
-
getTenantId
The tenant the session is currently in: the tenant of its last sign-in, tenant selection or tenant switch.- Returns:
- tenantId
-
setTenantId
-
authTime
-
getAuthTime
When the person authenticated (RFC 3339). A refresh or a tenant switch never changes it. Null when the authentication time is unknown: a session begun by a refresh token issued before the platform kept sessions.- Returns:
- authTime
-
setAuthTime
-
authority
-
getAuthority
Who authenticated the person: `LOCAL` for a password sign-in to the platform, otherwise the identifier of the identity provider. In a tenant administrator's list it is null when the session was federated through an identity provider that is not one of the tenant's (neither the tenant's own provider nor the deployment's provider the tenant inherits), as when a session begun in another tenant switched into this one: the other tenant's provider is never shown.- Returns:
- authority
-
setAuthority
-
idpKind
-
getIdpKind
The kind of the identity provider that authenticated the person. Null for a local sign-in, when the kind is unknown, or when `authority` is withheld.- Returns:
- idpKind
-
setIdpKind
-
methods
-
addMethodsItem
-
getMethods
The authentication method references of the sign-in (RFC 8176), as the session's access tokens carry them in `amr`: `pwd` for a password; what the identity provider asserted for a federated sign-in. Empty when none was asserted.- Returns:
- methods
-
setMethods
-
createdAt
-
getCreatedAt
When the session began (RFC 3339).- Returns:
- createdAt
-
setCreatedAt
-
lastActivityAt
-
getLastActivityAt
The session's last sign-in or refresh (RFC 3339).- Returns:
- lastActivityAt
-
setLastActivityAt
-
absoluteExpiresAt
-
getAbsoluteExpiresAt
The instant after which the session ends whatever its activity (RFC 3339): its beginning plus the configured absolute session lifetime. It never moves.- Returns:
- absoluteExpiresAt
-
setAbsoluteExpiresAt
-
rememberMe
-
getRememberMe
Whether the session is remembered: its refresh cookie is persistent and the longer Remember Me inactivity window applies, never past the absolute expiry.- Returns:
- rememberMe
-
setRememberMe
-
clientAddress
-
getClientAddress
The client address the sign-in came from, as the platform resolved it. Null when none was recorded.- Returns:
- clientAddress
-
setClientAddress
-
userAgent
-
getUserAgent
The user agent of the sign-in. Null when none was recorded.- Returns:
- userAgent
-
setUserAgent
-
current
-
getCurrent
Whether the request that listed the session came from it.- Returns:
- current
-
setCurrent
-
breakGlass
-
getBreakGlass
Whether the session is a break-glass session: opened through the emergency-access entry by a designated break-glass member with a security key or a device-bound passkey. Its access tokens carry the `break_glass` claim; it is never remembered and cannot switch tenant.- Returns:
- breakGlass
-
setBreakGlass
-
equals
-
hashCode
public int hashCode() -
toString
-
validateJsonElement
Validates the JSON Element and throws an exception if issues found- Parameters:
jsonElement- JSON Element- Throws:
IOException- if the JSON Element is invalid with respect to HumanSessionResponse
-
validateJsonElementAsCandidate
public static void validateJsonElementAsCandidate(com.google.gson.JsonElement jsonElement) throws IOException Validates the JSON Element as a candidate of a oneOf schema: the checks ofvalidateJsonElement(JsonElement), and the element carries no member this model does not declare. A oneOf schema without a discriminator tells its candidates apart by their member sets, so a candidate is matched on its closed member set.- Parameters:
jsonElement- JSON Element- Throws:
IOException- if the JSON Element is not a HumanSessionResponse
-
fromJson
Create an instance of HumanSessionResponse given an JSON string- Parameters:
jsonString- JSON string- Returns:
- An instance of HumanSessionResponse
- Throws:
IOException- if the JSON string is invalid with respect to HumanSessionResponse
-
toJson
Convert an instance of HumanSessionResponse to an JSON string- Returns:
- JSON string
-