Model

Session

Magento\Backend\Model\Auth\Session

What it does

This class manages backend admin user sessions in Magento 2, handling authentication state, user login/logout, and ACL (Access Control List) permissions.

Developers use it to check if an admin is logged in, verify user permissions for resources, and manage session lifecycle including prolonging session lifetime and handling first-page-after-login scenarios.

Public Methods

  • _resetState()
  • refreshAcl()
  • isAllowed()
  • isLoggedIn()
  • prolong()
  • isFirstPageAfterLogin()
  • setIsFirstPageAfterLogin()
  • processLogin()
  • processLogout()
  • isValidForPath()
  • getAcl()
  • setAcl()
  • getData()