Struct SessionManager 

pub struct SessionManager { /* private fields */ }

Owns the SessionStore and mints / resolves / revokes sessions.

Cheap to clone — the underlying store is reference-counted.

Implementations

impl SessionManager

pub fn new(store: Arc<dyn SessionStore>, default_duration: Duration) -> Self

Construct a manager with an explicit default session duration. Callers wanting the standard 30-day lifetime should use SessionManager::with_default_duration.

pub fn with_default_duration(store: Arc<dyn SessionStore>) -> Self

Construct with the DEFAULT_SESSION_DURATION (30 days).

pub async fn create(&self, user_id: &str) -> Result<Session>

Mint a fresh session for user_id and persist it via the store. The returned Session carries both the opaque cookie value (id) and the parallel CSRF token. Call sites set both cookies on the response (see cookie_for / csrf_cookie_for).

pub async fn resolve(&self, id: &str) -> Result<Option<Session>>

Resolve a presented session id. Returns Ok(None) for a missing-or-expired session so callers can treat “not authenticated” uniformly. Expired rows are left in the table — the periodic SessionStore::purge_expired sweep removes them.

pub async fn rotate(&self, old_id: &str) -> Result<Option<Session>>

Rotate a session id while preserving the user binding and the original expires_at. Used on privilege escalation (e.g. completing a step-up authentication) to defeat session fixation. Returns Ok(None) if the old id is unknown — caller can decide whether to surface as 401.

pub async fn revoke(&self, id: &str) -> Result<bool>

Revoke a single session — typically called from /logout.

pub async fn revoke_for_user(&self, user_id: &str) -> Result<u64>

Revoke every session for a user — typically called from “log out of all devices” or after a password change.

pub fn store(&self) -> &Arc<dyn SessionStore>

Borrow the underlying store. Phase 5/6 may want direct access (e.g. for the periodic purge sweep) without going through the manager’s API surface.

Trait Implementations

impl Clone for SessionManager

fn clone(&self) -> SessionManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.