9

I am building a community website in grails (using Apache Shiro for security and authentication system) and I would like to implement the feature "who is online?".

This url http://cksource.com/forums/viewonline.php (see snapshot below if you do not have acess to this Url) gives an example of what I would like to achieve.

How can I do that in the most simple way? Is there any existing solution in Grails or in Java ?

Thank you.

Snapshot : Snapshot of Who is online page http://www.freeimagehosting.net/uploads/th.2de8468a86.png or see here : http://www.freeimagehosting.net/image.php?2de8468a86.png

2
  • This URL requires a login, so it's useless for anyone who isn't or won't register on that site.
    – BalusC
    Commented Jul 17, 2010 at 13:53
  • @BalusC Question updated
    – fabien7474
    Commented Jul 17, 2010 at 16:12

2 Answers 2

23

You need to collect all logged in users in a Set<User> in the application scope. Just hook on login and logout and add and remove the User accordingly. Basically:

public void login(User user) {
    // Do your business thing and then
    logins.add(user);
}

public void logout(User user) {
    // Do your business thing and then
    logins.remove(user);
}

If you're storing the logged-in users in the session, then you'd like to add another hook on session destroy to issue a logout on any logged-in user. I am not sure about how Grails fits in the picture, but talking in Java Servlet API, you'd like to use HttpSessionListener#sessionDestroyed() for this.

public void sessionDestroyed(HttpSessionEvent event) {
    User user = (User) event.getSession().getAttribute("user");
    if (user != null) {
        Set<User> logins = (Set<User>) event.getSession().getServletContext().getAttribute("logins");
        logins.remove(user);
    }
}

You can also just let the User model implement HttpSessionBindingListener. The implemented methods will be invoked automagically whenever the User instance is been put in session or removed from it (which would also happen on session destroy).

public class User implements HttpSessionBindingListener {

    @Override
    public void valueBound(HttpSessionBindingEvent event) {
        Set<User> logins = (Set<User>) event.getSession().getServletContext().getAttribute("logins");
        logins.add(this);
    }

    @Override
    public void valueUnbound(HttpSessionBindingEvent event) {
        Set<User> logins = (Set<User>) event.getSession().getServletContext().getAttribute("logins");
        logins.remove(this);
    }

    // @Override equals() and hashCode() as well!

}
9
  • Perhaps also add a lease and refresh it upon user actions in order to filter out inactive sessions without proper logout.
    – b_erb
    Commented Jul 17, 2010 at 14:53
  • What if users don't logout explicitly but just close their browser? Commented Jul 17, 2010 at 15:19
  • @Partly and @Burt: just hooking on servletcontainer-managed session destroy as described in the last paragraph is sufficient.
    – BalusC
    Commented Jul 17, 2010 at 16:01
  • @BalusC. Thank you for your answer. However, this will not work for returning users that have enabled the "Remember me" cookie, right ?
    – fabien7474
    Commented Jul 17, 2010 at 16:17
  • 2
    This solution doesn't work across server restarts if the web server is serializing and restoring sessions. Still looking for a workaround to this.
    – JMB
    Commented Dec 6, 2013 at 21:35
2

This has been discussed some time ago on the mailing list: http://grails.1312388.n4.nabble.com/Information-about-all-logged-in-users-with-Acegi-or-SpringSecurity-in-Grails-td1372911.html

2
  • Thank you Stefan. However the thread you are pointing is about Spring Security and unfortunately I am using Shiro.
    – fabien7474
    Commented Jul 17, 2010 at 16:14
  • Hi Fabien, I did not read that carefully enough - the link I've posted just works for acegi. Commented Jul 18, 2010 at 20:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.