Restructure samples

samples/java/java-users/build.gradle

@@ -0,0 +1,22 @@
+apply from: JAVA_GRADLE
+apply from: TOMCAT_7_GRADLE
+apply from: SAMPLE_GRADLE
+
+dependencies {
+	compile(project(':spring-session-data-redis')) {
+		exclude module: 'jedis'
+	}
+	compile "org.springframework:spring-web:$springVersion",
+			"biz.paluch.redis:lettuce:$lettuceVersion",
+			"org.webjars:bootstrap:$bootstrapVersion",
+			"org.webjars:webjars-taglib:$webjarsTaglibVersion",
+			jstlDependencies
+
+	providedCompile "javax.servlet:javax.servlet-api:$servletApiVersion"
+
+	testCompile	"junit:junit:$junitVersion",
+			"org.springframework:spring-test:$springVersion",
+			"org.assertj:assertj-core:$assertjVersion"
+
+	integrationTestCompile seleniumDependencies
+}

samples/java/java-users/src/integration-test/java/sample/UserTests.java

@@ -0,0 +1,236 @@
+/*
+ * Copyright 2014-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import org.junit.After;
+import org.junit.Before;
+import org.junit.Test;
+import org.openqa.selenium.WebDriver;
+import org.openqa.selenium.WebElement;
+import org.openqa.selenium.htmlunit.HtmlUnitDriver;
+import sample.pages.HomePage;
+import sample.pages.LinkPage;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * @author Pool Dolorier
+ */
+public class UserTests {
+
+	private static final String ROB = "rob";
+	private static final String USERNAME = "username";
+	private static final String LUKE = "luke";
+	private static final String NAV_LINK = "navLink";
+	private static final String HREF = "href";
+	private static final String ADD_ACCOUNT = "addAccount";
+	private static final String UN = "un";
+	private static final String LOGOUT = "logout";
+	private static final String ERROR = "error";
+
+	private WebDriver driver;
+
+	@Before
+	public void setup() {
+		this.driver = new HtmlUnitDriver();
+	}
+
+	@After
+	public void tearDown() {
+		this.driver.quit();
+	}
+
+	@Test
+	public void firstVisitNotAuthenticated() {
+		HomePage homePage = HomePage.go(this.driver);
+		homePage.assertAt();
+		homePage.assertUserNameEmpty();
+	}
+
+	@Test
+	public void invalidLogin() {
+		HomePage homePage = HomePage.go(this.driver);
+		String user = ROB;
+		homePage.login(user, user + "invalid");
+		WebElement errorMessage = homePage.getElementById(ERROR);
+		homePage.assertAt();
+		homePage.assertErrorInvalidAuthentication(errorMessage);
+	}
+
+	@Test
+	public void emptyUsername() {
+		HomePage homePage = HomePage.go(this.driver);
+		homePage.login("", "");
+		WebElement errorMessage = homePage.getElementById(ERROR);
+		homePage.assertAt();
+		homePage.assertErrorInvalidAuthentication(errorMessage);
+	}
+
+	@Test
+	public void loginSingleUser() {
+		loginRob();
+	}
+
+	@Test
+	public void addAccount() {
+		backHomeForAddLukeAccount();
+	}
+
+	@Test
+	public void logInSecondUser() {
+		logInLukeAccount();
+	}
+
+	@Test
+	public void followingLinksKeepsNewSession() {
+		followingLukeLinkSession();
+
+	}
+
+	@Test
+	public void switchAccountRob() {
+		switchAccountRobHomePage();
+	}
+
+	@Test
+	public void followingLinksKeepsOriginalSession() {
+		followingRobLinkSession();
+	}
+
+	@Test
+	public void switchAccountLuke() {
+		switchAccountLukeHomePage();
+	}
+
+	@Test
+	public void logoutLuke() {
+		logoutLukeAccount();
+	}
+
+	@Test
+	public void switchBackRob() {
+		switchBackRobHomePage();
+	}
+
+	@Test
+	public void logoutRob() {
+		logoutRobAccount();
+	}
+
+	private HomePage loginRob() {
+		HomePage home = HomePage.go(this.driver);
+
+		String user = ROB;
+		home.login(user, user);
+		WebElement username = home.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(user);
+		return home;
+	}
+
+	private HomePage backHomeForAddLukeAccount() {
+		HomePage robHome = loginRob();
+
+		String addAccountLink = robHome.getContentAttributeByElementId(ADD_ACCOUNT, HREF);
+		HomePage backHome = robHome.home(this.driver, addAccountLink);
+		WebElement username = backHome.getElementById(USERNAME);
+		assertThat(username.getText()).isEmpty();
+		return backHome;
+	}
+
+	private HomePage logInLukeAccount() {
+		HomePage home = backHomeForAddLukeAccount();
+
+		String secondUser = LUKE;
+		home.login(secondUser, secondUser);
+		WebElement secondUserName = home.getElementById(UN);
+		assertThat(secondUserName.getText()).isEqualTo(secondUser);
+		return home;
+	}
+
+	private LinkPage followingLukeLinkSession() {
+		HomePage lukeHome = logInLukeAccount();
+
+		String navLink = lukeHome.getContentAttributeByElementId(NAV_LINK, HREF);
+		LinkPage lukeLinkPage = lukeHome.linkPage(this.driver, navLink);
+		lukeLinkPage.assertAt();
+		WebElement username = lukeLinkPage.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(LUKE);
+		return lukeLinkPage;
+	}
+
+	private HomePage switchAccountRobHomePage() {
+		LinkPage lukeLinkPage = followingLukeLinkSession();
+
+		String robSwitch = lukeLinkPage.getSwitchElementId(ROB);
+		String switchLink = lukeLinkPage.getContentAttributeByElementId(robSwitch, HREF);
+		HomePage robHome = lukeLinkPage.home(this.driver, switchLink);
+		WebElement username = robHome.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(ROB);
+		return robHome;
+	}
+
+	private LinkPage followingRobLinkSession() {
+		HomePage robHome = switchAccountRobHomePage();
+
+		String navLink = robHome.getContentAttributeByElementId(NAV_LINK, HREF);
+		LinkPage robLinkPage = robHome.linkPage(this.driver, navLink);
+		robLinkPage.assertAt();
+		WebElement username = robLinkPage.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(ROB);
+		return robLinkPage;
+	}
+
+	private HomePage switchAccountLukeHomePage() {
+		LinkPage robLinkPage = followingRobLinkSession();
+
+		String lukeSwitch = robLinkPage.getSwitchElementId(LUKE);
+		String lukeSwitchLink = robLinkPage.getContentAttributeByElementId(lukeSwitch, HREF);
+		HomePage lukeHome = robLinkPage.home(this.driver, lukeSwitchLink);
+		WebElement username = lukeHome.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(LUKE);
+		return lukeHome;
+	}
+
+	private HomePage logoutLukeAccount() {
+		HomePage lukeHome = switchAccountLukeHomePage();
+
+		String logoutLink = lukeHome.getContentAttributeByElementId(LOGOUT, HREF);
+		HomePage home = lukeHome.home(this.driver, logoutLink);
+		home.assertUserNameEmpty();
+		return home;
+	}
+
+	private HomePage switchBackRobHomePage() {
+		HomePage homePage = logoutLukeAccount();
+
+		String robSwitch = homePage.getSwitchElementId(ROB);
+		String robSwitchLink = homePage.getContentAttributeByElementId(robSwitch, HREF);
+		HomePage robHome = homePage.home(this.driver, robSwitchLink);
+		WebElement username = robHome.getElementById(UN);
+		assertThat(username.getText()).isEqualTo(ROB);
+		return robHome;
+	}
+
+	private HomePage logoutRobAccount() {
+		HomePage robHome = switchBackRobHomePage();
+
+		String logoutLink = robHome.getContentAttributeByElementId(LOGOUT, HREF);
+		HomePage home = robHome.home(this.driver, logoutLink);
+		home.assertUserNameEmpty();
+		return home;
+	}
+}

samples/java/java-users/src/integration-test/java/sample/pages/BasePage.java

@@ -0,0 +1,74 @@
+/*
+ * Copyright 2014-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample.pages;
+
+import org.openqa.selenium.By;
+import org.openqa.selenium.WebDriver;
+import org.openqa.selenium.WebElement;
+import org.openqa.selenium.support.PageFactory;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * @author Pool Dolorier
+ */
+public abstract class BasePage {
+
+	private WebDriver driver;
+
+	public BasePage(WebDriver driver) {
+		this.driver = driver;
+	}
+
+	public WebDriver getDriver() {
+		return this.driver;
+	}
+
+	public static void get(WebDriver driver, String get) {
+		String baseUrl = "http://localhost:" + System.getProperty("tomcat.port");
+		driver.get(baseUrl + get);
+	}
+
+	public static void getFrom(WebDriver driver, String resourceUrl) {
+		driver.get(resourceUrl);
+	}
+
+	public HomePage home(WebDriver driver, String resourceUrl) {
+		getFrom(driver, resourceUrl);
+		return PageFactory.initElements(driver, HomePage.class);
+	}
+
+	public LinkPage linkPage(WebDriver driver, String resourceUrl) {
+		getFrom(driver, resourceUrl);
+		return PageFactory.initElements(driver, LinkPage.class);
+	}
+
+	public String getSwitchElementId(String user) {
+		return "switchAccount" + user;
+	}
+
+	public WebElement getElementById(String id) {
+		return this.driver.findElement(By.id(id));
+	}
+
+	public String getContentAttributeByElementId(String id, String attribute) {
+		WebElement element = getElementById(id);
+		assertThat(element.getAttribute(attribute)).isNotEmpty();
+		return element.getAttribute(attribute);
+	}
+
+}

samples/java/java-users/src/integration-test/java/sample/pages/HomePage.java

@@ -0,0 +1,66 @@
+/*
+ * Copyright 2014-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample.pages;
+
+import org.openqa.selenium.WebDriver;
+import org.openqa.selenium.WebElement;
+import org.openqa.selenium.support.FindBy;
+import org.openqa.selenium.support.PageFactory;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * @author Pool Dolorier
+ */
+public class HomePage extends BasePage {
+
+	@FindBy(name = "username")
+	private WebElement username;
+
+	@FindBy(name = "password")
+	private WebElement password;
+
+	@FindBy(css = "form[method='post']")
+	private WebElement form;
+
+	public HomePage(WebDriver driver) {
+		super(driver);
+	}
+
+	public static HomePage go(WebDriver driver) {
+		get(driver, "/");
+		return PageFactory.initElements(driver, HomePage.class);
+	}
+
+	public void assertAt() {
+		assertThat(getDriver().getTitle()).isEqualTo("Demonstrates Multi User Log In");
+	}
+
+	public void assertUserNameEmpty() {
+		assertThat(this.username.getText()).isEmpty();
+	}
+
+	public void assertErrorInvalidAuthentication(WebElement errorMessage) {
+		assertThat(errorMessage.getText()).isEqualTo("Invalid username / password. Please ensure the username is the same as the password.");
+	}
+
+	public void login(String user, String password) {
+		this.username.sendKeys(user);
+		this.password.sendKeys(password);
+		this.form.submit();
+	}
+}

samples/java/java-users/src/integration-test/java/sample/pages/LinkPage.java

@@ -0,0 +1,35 @@
+/*
+ * Copyright 2014-2017 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample.pages;
+
+import org.openqa.selenium.WebDriver;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * @author Pool Dolorier
+ */
+public class LinkPage  extends BasePage {
+
+	public LinkPage(WebDriver driver) {
+		super(driver);
+	}
+
+	public void assertAt() {
+		assertThat(getDriver().getTitle()).isEqualTo("Linked Page");
+	}
+}

samples/java/java-users/src/main/java/sample/Account.java

@@ -0,0 +1,45 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+public class Account {
+	private String username;
+
+	private String logoutUrl;
+
+	private String switchAccountUrl;
+
+	public Account(String username, String logoutUrl, String switchAccountUrl) {
+		super();
+		this.username = username;
+		this.logoutUrl = logoutUrl;
+		this.switchAccountUrl = switchAccountUrl;
+	}
+
+	public String getUsername() {
+		return this.username;
+	}
+
+	public String getLogoutUrl() {
+		return this.logoutUrl;
+	}
+
+	public String getSwitchAccountUrl() {
+		return this.switchAccountUrl;
+	}
+
+}

samples/java/java-users/src/main/java/sample/Config.java

@@ -0,0 +1,38 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
+import org.springframework.session.data.redis.config.annotation.web.http.EnableRedisHttpSession;
+
+/**
+ * @author Rob Winch
+ */
+
+// tag::class[]
+@Configuration
+@EnableRedisHttpSession
+public class Config {
+
+	@Bean
+	public LettuceConnectionFactory connectionFactory() {
+		return new LettuceConnectionFactory();
+	}
+}
+// end::class[]

samples/java/java-users/src/main/java/sample/Initializer.java

@@ -0,0 +1,36 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import javax.servlet.ServletContext;
+
+import org.springframework.session.web.context.AbstractHttpSessionApplicationInitializer;
+
+/**
+ * @author Rob Winch
+ */
+public class Initializer extends AbstractHttpSessionApplicationInitializer {
+
+	public Initializer() {
+		super(Config.class);
+	}
+
+	@Override
+	protected void afterSessionRepositoryFilter(ServletContext servletContext) {
+		appendFilters(servletContext, new UserAccountsFilter());
+	}
+}

samples/java/java-users/src/main/java/sample/LoginServlet.java

@@ -0,0 +1,48 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import java.io.IOException;
+
+import javax.servlet.ServletException;
+import javax.servlet.annotation.WebServlet;
+import javax.servlet.http.HttpServlet;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+@WebServlet("/login")
+public class LoginServlet extends HttpServlet {
+
+	@Override
+	protected void doPost(HttpServletRequest req, HttpServletResponse resp)
+			throws ServletException, IOException {
+		String username = req.getParameter("username");
+		String password = req.getParameter("password");
+
+		if (username != null && !"".equals(username) && username.equals(password)) {
+			req.getSession().setAttribute("username", username);
+			String url = resp.encodeRedirectURL(req.getContextPath() + "/");
+			resp.sendRedirect(url);
+		}
+		else {
+			String url = resp.encodeRedirectURL(req.getContextPath() + "/?error");
+			resp.sendRedirect(url);
+		}
+	}
+
+	private static final long serialVersionUID = -8157634860354132501L;
+}

samples/java/java-users/src/main/java/sample/LogoutServlet.java

@@ -0,0 +1,43 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import java.io.IOException;
+
+import javax.servlet.ServletException;
+import javax.servlet.annotation.WebServlet;
+import javax.servlet.http.HttpServlet;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+@WebServlet("/logout")
+public class LogoutServlet extends HttpServlet {
+
+	@Override
+	protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+			throws ServletException, IOException {
+		HttpSession session = req.getSession(false);
+		if (session != null) {
+			session.invalidate();
+		}
+		String url = resp.encodeRedirectURL(req.getContextPath() + "/");
+		resp.sendRedirect(url);
+	}
+
+	private static final long serialVersionUID = 4061762524521437433L;
+}

samples/java/java-users/src/main/java/sample/UserAccountsFilter.java

@@ -0,0 +1,104 @@
+/*
+ * Copyright 2014-2016 the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package sample;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import javax.servlet.Filter;
+import javax.servlet.FilterChain;
+import javax.servlet.FilterConfig;
+import javax.servlet.ServletException;
+import javax.servlet.ServletRequest;
+import javax.servlet.ServletResponse;
+import javax.servlet.http.HttpServletRequest;
+
+import org.springframework.session.Session;
+import org.springframework.session.SessionRepository;
+import org.springframework.session.web.http.HttpSessionManager;
+
+public class UserAccountsFilter implements Filter {
+
+	public void init(FilterConfig filterConfig) throws ServletException {
+	}
+
+	@SuppressWarnings("unchecked")
+	public void doFilter(ServletRequest request, ServletResponse response,
+			FilterChain chain) throws IOException, ServletException {
+		HttpServletRequest httpRequest = (HttpServletRequest) request;
+
+		// tag::HttpSessionManager[]
+		HttpSessionManager sessionManager = (HttpSessionManager) httpRequest
+				.getAttribute(HttpSessionManager.class.getName());
+		// end::HttpSessionManager[]
+		SessionRepository<Session> repo = (SessionRepository<Session>) httpRequest
+				.getAttribute(SessionRepository.class.getName());
+
+		String currentSessionAlias = sessionManager.getCurrentSessionAlias(httpRequest);
+		Map<String, String> sessionIds = sessionManager.getSessionIds(httpRequest);
+		String unauthenticatedAlias = null;
+
+		String contextPath = httpRequest.getContextPath();
+		List<Account> accounts = new ArrayList<Account>();
+		Account currentAccount = null;
+		for (Map.Entry<String, String> entry : sessionIds.entrySet()) {
+			String alias = entry.getKey();
+			String sessionId = entry.getValue();
+
+			Session session = repo.getSession(sessionId);
+			if (session == null) {
+				continue;
+			}
+
+			String username = session.getAttribute("username");
+			if (username == null) {
+				unauthenticatedAlias = alias;
+				continue;
+			}
+
+			String logoutUrl = sessionManager.encodeURL("./logout", alias);
+			String switchAccountUrl = sessionManager.encodeURL("./", alias);
+			Account account = new Account(username, logoutUrl, switchAccountUrl);
+			if (currentSessionAlias.equals(alias)) {
+				currentAccount = account;
+			}
+			else {
+				accounts.add(account);
+			}
+		}
+
+		// tag::addAccountUrl[]
+		String addAlias = unauthenticatedAlias == null ? // <1>
+				sessionManager.getNewSessionAlias(httpRequest)
+				: // <2>
+				unauthenticatedAlias; // <3>
+		String addAccountUrl = sessionManager.encodeURL(contextPath, addAlias); // <4>
+		// end::addAccountUrl[]
+
+		httpRequest.setAttribute("currentAccount", currentAccount);
+		httpRequest.setAttribute("addAccountUrl", addAccountUrl);
+		httpRequest.setAttribute("accounts", accounts);
+
+		chain.doFilter(request, response);
+	}
+
+	public void destroy() {
+	}
+
+}

samples/java/java-users/src/main/webapp/assets/js/ie10-viewport-bug-workaround.js

@@ -0,0 +1,22 @@
+/*!
+ * IE10 viewport hack for Surface/desktop Windows 8 bug
+ * Copyright 2014 Twitter, Inc.
+ * Licensed under the Creative Commons Attribution 3.0 Unported License. For
+ * details, see http://creativecommons.org/licenses/by/3.0/.
+ */
+
+// See the Getting Started docs for more information:
+// http://getbootstrap.com/getting-started/#support-ie10-width
+
+(function () {
+  'use strict';
+  if (navigator.userAgent.match(/IEMobile\/10\.0/)) {
+    var msViewportStyle = document.createElement('style')
+    msViewportStyle.appendChild(
+      document.createTextNode(
+        '@-ms-viewport{width:auto!important}'
+      )
+    )
+    document.querySelector('head').appendChild(msViewportStyle)
+  }
+})();

samples/java/java-users/src/main/webapp/index.jsp

@@ -0,0 +1,112 @@
+<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
+<%@ taglib prefix="wj" uri="http://www.webjars.org/tags" %>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <title>Demonstrates Multi User Log In</title>
+    <wj:locate path="bootstrap.min.css" relativeTo="META-INF/resources" var="bootstrapCssLocation"/>
+    <link rel="stylesheet" href="<c:url value="${bootstrapCssLocation}"/>">
+    <style type="text/css">
+        body {
+            padding: 1em;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+      <!-- Static navbar -->
+      <nav class="navbar navbar-default" role="navigation">
+        <div class="container-fluid">
+          <div class="navbar-header">
+            <a class="navbar-brand" href="https://github.com/spring-projects/spring-session/">Spring Session</a>
+          </div>
+          <div id="navbar" class="navbar-collapse collapse">
+            <ul class="nav navbar-nav">
+              <c:url value="/" var="homeUrl"/>
+              <li class="active"><a id="navHome" href="${homeUrl}">Home</a></li>
+              <li>
+                  <!-- tag::link[]
+                  -->
+                <c:url value="/link.jsp" var="linkUrl"/>
+                <a id="navLink" href="${linkUrl}">Link</a>
+              <!-- end::link[]
+                              -->
+              </li>
+            </ul>
+            <c:if test="${currentAccount != null or not empty accounts}">
+                <ul class="nav navbar-nav navbar-right">
+                  <li class="dropdown">
+                    <a id="toggle" href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false"><c:out value="${username}"/> <span class="caret"></span></a>
+                    <ul id="user-menu" class="dropdown-menu" role="menu">
+                      <c:if test="${currentAccount != null}">
+                          <li><a id="logout" href="${currentAccount.logoutUrl}">Log Out</a></li>
+                          <li><a id="addAccount" href="${addAccountUrl}">Add Account</a></li>
+                      </c:if>
+                      <c:if test="${not empty accounts}">
+                          <li class="divider"></li>
+                          <li class="dropdown-header">Switch Account</li>
+                          <li class="divider"></li>
+                      </c:if>
+                      <c:forEach items="${accounts}" var="account">
+                          <c:set var="encodedUsername">
+                            <c:out value="${account.username}"/>
+                          </c:set>
+                          <li><a id="switchAccount${encodedUsername}" href="${account.switchAccountUrl}"><c:out value="${account.username}"/></a></li>
+                      </c:forEach>
+                    </ul>
+                  </li>
+                </ul>
+            </c:if>
+          </div><!--/.nav-collapse -->
+        </div><!--/.container-fluid -->
+      </nav>
+
+        <h1>Description</h1>
+        <p>This application demonstrates how to use Spring Session to authenticate as multiple users at a time. View authenticated users in the upper right corner.</p>
+
+        <c:choose>
+            <c:when test="${username == null}">
+                <h1>Please Log In</h1>
+                <p>You are not currently authenticated with this session. You can authenticate with any username password combination that are equal. A few examples to try:</p>
+                <ul>
+                    <li><b>Username</b> rob and <b>Password</b> rob</li>
+                    <li><b>Username</b> luke and <b>Password</b> luke</li>
+                </ul>
+                <c:if test="${param.error != null}">
+                    <div id="error" class="alert alert-danger">Invalid username / password. Please ensure the username is the same as the password.</div>
+                </c:if>
+                <c:url value="/login" var="loginUrl"/>
+                <form action="${loginUrl}" method="post">
+                    <div class="form-group">
+                        <label for="username">Username</label>
+                        <input id="username" type="text" name="username"/>
+                    </div>
+                    <div class="form-group">
+                        <label for="password">Password</label>
+                        <input id="password" type="password" name="password"/>
+                    </div>
+                    <input type="submit" value="Login"/>
+                </form>
+            </c:when>
+            <c:otherwise>
+                <h1 id="un"><c:out value="${username}"/></h1>
+                <p>You are authenticated as <b><c:out value="${username}"/></b>. Observe that you can <a href="${linkUrl}">navigate links</a> and the correct session is used. Using the links in the upper right corner you can:</p>
+                <ul>
+                    <li>Log Out</li>
+                    <li>Switch Accounts</li>
+                    <li>Add Account</li>
+                   </ul>
+            </c:otherwise>
+        </c:choose>
+    </div>
+    <!-- Bootstrap core JavaScript
+    ================================================== -->
+    <!-- Placed at the end of the document so the pages load faster -->
+    <wj:locate path="jquery.min.js" relativeTo="META-INF/resources" var="jqueryLocation"/>
+    <script src="<c:url value="${jqueryLocation}"/>"></script>
+    <wj:locate path="bootstrap.min.js" relativeTo="META-INF/resources" var="bootstrapJsLocation"/>
+    <script src="<c:url value="${bootstrapJsLocation}"/>"></script>
+    <!-- IE10 viewport hack for Surface/desktop Windows 8 bug -->
+    <script src="<c:url value="/assets/js/ie10-viewport-bug-workaround.js"/>"></script>
+</body>
+</html>

samples/java/java-users/src/main/webapp/link.jsp

@@ -0,0 +1,85 @@
+<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
+<%@ taglib prefix="wj" uri="http://www.webjars.org/tags" %>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <title>Linked Page</title>
+    <wj:locate path="bootstrap.min.css" relativeTo="META-INF/resources" var="bootstrapCssLocation"/>
+    <link rel="stylesheet" href="<c:url value="${bootstrapCssLocation}"/>">
+    <style type="text/css">
+        body {
+            padding: 1em;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+      <!-- Static navbar -->
+      <nav class="navbar navbar-default" role="navigation">
+        <div class="container-fluid">
+          <div class="navbar-header">
+            <a class="navbar-brand" href="https://github.com/spring-projects/spring-session/">Spring Session</a>
+          </div>
+          <div id="navbar" class="navbar-collapse collapse">
+            <ul class="nav navbar-nav">
+              <c:url value="/" var="homeUrl"/>
+              <li><a id="navHome" href="${homeUrl}">Home</a></li>
+              <c:url value="/link.jsp" var="linkUrl"/>
+              <li class="active"><a id="navLink" href="${linkUrl}">Link</a></li>
+
+            </ul>
+            <c:if test="${currentAccount != null or not empty accounts}">
+                <ul class="nav navbar-nav navbar-right">
+                  <li class="dropdown">
+                    <a id="toggle" href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-expanded="false"><c:out value="${username}"/> <span class="caret"></span></a>
+                    <ul id="user-menu" class="dropdown-menu" role="menu">
+                      <c:if test="${currentAccount != null}">
+                          <li><a id="logout" href="${currentAccount.logoutUrl}">Log Out</a></li>
+                          <li><a id="addAccount" href="${addAccountUrl}">Add Account</a></li>
+                      </c:if>
+                      <c:if test="${not empty accounts}">
+                          <li class="divider"></li>
+                          <li class="dropdown-header">Switch Account</li>
+                          <li class="divider"></li>
+                      </c:if>
+                      <c:forEach items="${accounts}" var="account">
+                          <li><a id="switchAccount${account.username}" href="${account.switchAccountUrl}"><c:out value="${account.username}"/></a></li>
+                      </c:forEach>
+                    </ul>
+                  </li>
+                </ul>
+            </c:if>
+          </div><!--/.nav-collapse -->
+        </div><!--/.container-fluid -->
+      </nav>
+
+        <h1>Description</h1>
+        <p>This page demonstrates how we keep track of the correct user session between links even when multiple tabs are open. Try opening another tab with a different user and browse. Then come back to the original tab and see the correct user is maintained.</p>
+
+        <c:choose>
+            <c:when test="${username == null}">
+                <h1>Please Log In</h1>
+                <p>You are not currently authenticated with this session. <a href="${homeUrl}">Log In</a></p>
+            </c:when>
+            <c:otherwise>
+                <h1 id="un"><c:out value="${username}"/></h1>
+                <p>You are authenticated as <b><c:out value="${username}"/></b>. Observe that you can <a href="${linkUrl}">navigate links</a> and the correct session is used. Using the links in the upper right corner you can:</p>
+                <ul>
+                    <li>Log Out</li>
+                    <li>Switch Accounts</li>
+                    <li>Add Account</li>
+                   </ul>
+            </c:otherwise>
+        </c:choose>
+    </div>
+    <!-- Bootstrap core JavaScript
+    ================================================== -->
+    <!-- Placed at the end of the document so the pages load faster -->
+    <wj:locate path="jquery.min.js" relativeTo="META-INF/resources" var="jqueryLocation"/>
+    <script src="<c:url value="${jqueryLocation}"/>"></script>
+    <wj:locate path="bootstrap.min.js" relativeTo="META-INF/resources" var="bootstrapJsLocation"/>
+    <script src="<c:url value="${bootstrapJsLocation}"/>"></script>
+    <!-- IE10 viewport hack for Surface/desktop Windows 8 bug -->
+    <script src="<c:url value="/assets/js/ie10-viewport-bug-workaround.js"/>"></script>
+</body>
+</html>