← Back to plugin index

Gateway Session Terminator Subscriber (Loginapp)
Description

This event subscriber terminates a user's Airlock Gateway sessions. Upon an event trigger, the plugin contacts one or more Airlock Gateways via their REST APIs, terminating all sessions, optionally excluding the current user's active session. In clustered gateway deployments, it is sufficient to contact a single gateway node to invalidate the user’s sessions across the cluster.

For consistency, consider subscribing to the same events used by the 'Gateway Session Terminator Subscriber (Adminapp)'.

Prerequisites:

  • The Gateway Audit Token must be configured to contain only the username
  • IAM must be able to open HTTP(S) connections to the Airlock Gateways. This may require changes to your network topology.

Security Advisory: Certain events (e.g., “Generic Step Result With Identified User”) can be triggered without an authenticated user session. Under Denial-of-Service conditions, such events may result in unintended session terminations and should therefore be selected with caution.

Type name
LoginappGatewaySessionTerminatorEventSubscriber
Class
com.airlock.iam.login.application.configuration.event.LoginappGatewaySessionTerminatorEventSubscriberConfig
May be used by
Loginapp Event Settings
Properties
Gateway REST APIs (gatewayRestApiConnections)
Description
The Airlock Gateway REST APIs that are invoked to terminate the user's sessions.
Attributes
Plugin-List
Mandatory
Assignable plugins
Gateway REST API Connection
Keep Current User Session (keepCurrentUserSession)
Description
If enabled, the user's currently active session is not terminated. For example, if this event subscriber listens for password changes and this flag is enabled, a user's active session will not be terminated when they change their own password.
Attributes
Boolean
Optional
Default value
true
Event (event)
Description
The user event about which the subscriber should be notified.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Airlock 2FA Device Activated Airlock 2FA Device Deleted Airlock 2FA Device In Cooldown Used Authentication Flow Successfully Completed Authentication Method Changed Context Data Changed Cronto Device Activated Cronto Device Deleted Cronto Letter Ordered Device Token Deleted Device Token Registered Email Address Added Email Address Changed Email Address Deleted FIDO Credential Deleted FIDO Credential Registered Generic Step Result With Identified User Logged in from new Device MTAN Token Deleted MTAN Token Phone Number Changed MTAN Token Registered OATH OTP Secret Added OATH OTP Secret Viewed OAuth 2.0 User Consent Processed Password Changed Password Letter Ordered User Created User Locked User Realm Changed User Unlocked
YAML Template (with default values) 

type: LoginappGatewaySessionTerminatorEventSubscriber
id: LoginappGatewaySessionTerminatorEventSubscriber-xxxxxx
displayName: 
comment: 
properties:
  event:
  gatewayRestApiConnections:
  keepCurrentUserSession: true