How does \Magento\Security\Model\Plugin\AuthSession::aroundProlong() work?

dmitry_fedyuk · April 10, 2016, 3:56am

magento/magento2/blob/052e789/app/code/Magento/Security/etc/adminhtml/di.xml#L12-L14


<type name="Magento\Backend\Model\Auth\Session">
    <plugin name="security_admin_sessions_prolong" type="Magento\Security\Model\Plugin\AuthSession" />
</type>

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Model/Plugin/AuthSession.php#L54-L71


/**
 * Admin Session prolong functionality
 *
 * @param Session $session
 * @param \Closure $proceed
 * @return mixed
 */
public function aroundProlong(Session $session, \Closure $proceed)
{
    if (!$this->sessionsManager->getCurrentSession()->isLoggedInStatus()) {
        $session->destroy();
        $this->addUserLogoutNotification();
        return null;
    }
    $result = $proceed();
    $this->sessionsManager->processProlong();
    return $result;
}

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Model/AdminSessionsManager.php#L142-L155


/**
 * Get current session record
 *
 * @return AdminSessionInfo
 */
public function getCurrentSession()
{
    if (!$this->currentSession) {
        $this->currentSession = $this->adminSessionInfoFactory->create();
        $this->currentSession->load($this->authSession->getSessionId(), 'session_id');
    }


    return $this->currentSession;
}

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Model/ResourceModel/AdminSessionInfo.php#L33-L41


/**
 * Initialize resource model
 *
 * @return void
 */
protected function _construct()
{
    $this->_init(\Magento\Security\Setup\InstallSchema::ADMIN_SESSIONS_DB_TABLE_NAME, 'id');
}

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Setup/InstallSchema.php#L17-L20


/**
 * Session DB table name
 */
const ADMIN_SESSIONS_DB_TABLE_NAME = 'admin_user_session';

Details: How is the «admin_user_session» table used?

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Model/AdminSessionsManager.php#L110-L124


/**
 * Handle Prolong process
 *
 * @return $this
 */
public function processProlong()
{
    $this->getCurrentSession()->setData(
        'updated_at',
        $this->authSession->getUpdatedAt()
    );
    $this->getCurrentSession()->save();


    return $this;
}

Details: How is the \Magento\Security\Model\AdminSessionsManager::processProlong() implemented and used?

dmitry_fedyuk · April 10, 2016, 9:03am