StorageBackedSessionManager Contract

[Cantor, Scott]

On 9/20/16, 9:36 AM, "dev on behalf of Marvin Addison" <dev-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:

> I'm trying to handle what I would think is a common case, where the data for the key
> doesn't exist. Throwing a RuntimeException in that case is perfectly acceptable, but it
> would be nice to have it documented somewhere.

That's not the reason. If the data didn't exist, it would return null. Here, the data isn't *loaded* so it doesn't know. The client-storage read flow has to be executed before making use of the service, and that must not have been done.

If it's a back-channel flow, obviously the Client SS can't be used in that scenario, so it may be necessary for us to add capability controls to enable us to detect misconfiguration.

-- Scott