Struct CookieService 

pub struct CookieService { /* private fields */ }

Signs and verifies HTTP cookie values.

Not #[Injectable] — provide manually via ctx.provide(CookieService::new(...)).

Secret rotation

The HMAC secret lives behind Rotating: signing/verification pay one atomic pointer load, and rotate_secret hot-swaps the secret with the previous one retained for verification, so cookies issued just before rotation stay valid until their natural Max-Age expiry.

Implementations

impl CookieService

pub fn new(config: CookieConfig) -> Self

pub fn rotate_secret(&self, new_secret: &[u8], version: u64)

Hot-swap the HMAC secret. Stale (≤ current) versions are ignored.

pub fn sign(&self, value: &str) -> String

Returns "{value}.{base64url_hmac}" — the signed form stored in the cookie.

pub fn verify<'a>(&self, signed: &'a str) -> Option<&'a str>

Verifies the HMAC signature and returns the original value if valid.

Tries the current secret, then the previous one (rotation grace window). Returns None for any tampered, malformed, or missing signature.

pub fn bake(&self, value: &str) -> String

Returns a full Set-Cookie header value for value.

pub fn clear(&self) -> String

Returns a Set-Cookie header that expires the named cookie immediately.

pub fn extract(&self, headers: &HeaderMap) -> Option<String>

Reads the named cookie from request headers, verifies its HMAC, and returns the original (unsigned) value on success.