Struct SessionManager 

pub struct SessionManager<S: AuthSchema> { /* private fields */ }

Session manager handles session creation, validation, and cleanup

Implementations

impl<S: AuthSchema> SessionManager<S>

pub fn new(config: Arc<AuthConfig>, database: Arc<dyn AuthStore<S>>) -> Self

pub async fn create_session( &self, user: &impl AuthUser, ip_address: Option<String>, user_agent: Option<String>, ) -> AuthResult<S::Session>

Create a new session for a user

Errors

Propagates errors from session hooks or persistence.

pub async fn create_session_record( &self, user: &impl AuthUser, ip_address: Option<String>, user_agent: Option<String>, ) -> AuthResult<AdapterRecord<S::Session>>

Create a real session and retain its declared adapter output.

Errors

Propagates errors from persistence or configured callbacks.

pub async fn create_session_record_in_transaction( &self, user: &impl AuthUser, ip_address: Option<String>, user_agent: Option<String>, database: &dyn AuthTransaction<S>, ) -> AuthResult<AdapterRecord<S::Session>>

Create the session through an existing authentication transaction.

Errors

Propagates transaction creation and callback errors.

pub async fn get_session(&self, token: &str) -> AuthResult<Option<S::Session>>

Read and refresh a session according to the configured expiry window.

Errors

Propagates errors from the session store.

pub async fn read_session( &self, token: &str, options: SessionReadOptions, ) -> AuthResult<SessionRead<S::Session>>

Read persisted session state with explicit control over side effects. Deferred browser reads leave expired rows in place until a later write.

Errors

Propagates errors from the session store.

pub async fn read_loaded_session( &self, session: S::Session, options: SessionReadOptions, ) -> AuthResult<SessionRead<S::Session>>

Apply the session lifecycle to a snapshot already read from this store. Session handlers use this to retain their original hook context without looking up the session a second time. Validation and refresh still run. The supplied snapshot must come from this manager’s store, never client input.

Errors

Propagates errors from the session store.

pub async fn read_loaded_session_record( &self, session: AdapterRecord<S::Session>, options: SessionReadOptions, ) -> AuthResult<SessionRead<AdapterRecord<S::Session>>>

Apply the same physical expiry/refresh lifecycle to retained adapter output. The record must originate from this manager’s actual initialized store.

pub fn request_disables_refresh(&self, request: &impl SessionRequest) -> bool

Whether signed browser preferences or the query suppress refresh. Query values use the upstream Boolean coercion: any nonempty string, including false, disables refreshing.

pub fn has_dont_remember_cookie(&self, request: &impl SessionRequest) -> bool

The independently signed browser session preference.

pub async fn delete_session(&self, token: &str) -> AuthResult<()>

Delete a session

Errors

Propagates errors from the session store.

pub async fn delete_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<()>

Delete all sessions for a user

Errors

Propagates errors from the session store.

pub async fn list_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<Vec<S::Session>>

Get all active sessions for a user

Errors

Propagates errors from the session store.

pub async fn revoke_session(&self, token: &str) -> AuthResult<bool>

Revoke a specific session by token

Errors

Propagates errors from the session store.

pub async fn revoke_all_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<usize>

Revoke all sessions for a user

Errors

Propagates errors from the session store.

pub async fn revoke_other_user_sessions( &self, user_id: impl AsRef<str>, current_token: &str, ) -> AuthResult<usize>

Revoke all sessions for a user except the current one

Errors

Propagates errors from the session store.

pub fn is_session_fresh(&self, session: &impl AuthSession) -> bool

Check whether a session is “fresh” (created recently enough for sensitive operations like password change or account deletion).

A positive freshness window requires creation time within that window. None and zero disable the restriction, matching upstream freshAge: 0.

pub fn validate_token_format(&self, token: &str) -> bool

Validate session token format

pub fn extract_session_token(&self, req: &impl SessionRequest) -> Option<String>

Extract a verified session token from the configured cookie.

The core runtime does not authenticate bearer headers. The separate bearer plugin may establish a signed cookie before this parser runs.

Trait Implementations

impl<S: AuthSchema> Clone for SessionManager<S>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S: AuthSchema> Debug for SessionManager<S>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.