Struct SessionManager 

pub struct SessionManager { /* private fields */ }

Orchestrates session lifecycle: cookie extraction, store lookup, creation, persistence, and deletion.

Not #[Injectable] — provide via ctx.provide(SessionManager::new(...)).

Implementations

impl SessionManager

pub fn new(store: impl SessionStore, config: SessionConfig) -> Self

pub async fn load_from_headers( &self, headers: &HeaderMap, ) -> Option<Arc<Session>>

Reads and verifies the session-ID cookie, then loads the session from the store. Returns None if the cookie is missing, tampered, or the session has expired / been deleted.

pub async fn create(&self) -> Arc<Session>

Create a new empty session (not yet persisted — call save after populating data).

pub async fn save(&self, session: &Session) -> bool

Persist session to the store with the configured TTL.

pub async fn delete(&self, id: &str) -> bool

Delete session from the store (logout / invalidation).

pub fn session_cookie(&self, id: &str) -> String

Returns a Set-Cookie header value that sets the session-ID cookie.

pub fn clear_cookie(&self) -> String

Returns a Set-Cookie header value that clears the session-ID cookie.

pub fn rotate_cookie_secret(&self, new_secret: &[u8], version: u64)

Hot-swap the session-cookie HMAC secret (delegates to the internal CookieService; previous secret stays valid for the grace window).