[breaking] sessions - Clearing restx principal cache when logging out, thus allowing to refresh principal roles on his next authentication.

This fixes #260

Author: fcamblor

restx-security-basic/src/main/java/restx/security/SessionInvalider.java

@@ -1,14 +1,24 @@
 package restx.security;
 
+import com.google.common.base.Optional;
 import restx.factory.Component;
 
 @Component
 public class SessionInvalider {
 
-    public SessionInvalider() {
+    private RestxSession.Definition restxSessionDefinition;
+
+    public SessionInvalider(RestxSession.Definition restxSessionDefinition) {
+        this.restxSessionDefinition = restxSessionDefinition;
     }
 
     public void invalidateSession(){
+        // Invalidating principal cache (on next login, principal roles will be refreshed)
+        Optional<? extends RestxPrincipal> principal = RestxSession.current().getPrincipal();
+        if (principal.isPresent()) {
+            restxSessionDefinition.getEntry(RestxPrincipal.SESSION_DEF_KEY).get().invalidateCacheFor(principal.get().getName());
+        }
+
         // Clearing principal
         RestxSession.current().clearPrincipal();
         RestxSession.current().define(String.class, Session.SESSION_DEF_KEY, null);