Struct SecureSessionConfig 

pub struct SecureSessionConfig {
    pub max_lifetime: Duration,
    pub idle_timeout: Duration,
    pub max_concurrent_sessions: u32,
    pub rotation_interval: Duration,
    pub require_secure_transport: bool,
    pub enable_device_fingerprinting: bool,
    pub max_risk_score: u8,
    pub validate_ip_address: bool,
    pub max_ip_changes: u32,
    pub enable_geolocation: bool,
}

Secure session configuration

Fields

max_lifetime: Duration

Maximum session lifetime

idle_timeout: Duration

Session idle timeout

max_concurrent_sessions: u32

Maximum concurrent sessions per user

rotation_interval: Duration

Force session rotation interval

require_secure_transport: bool

Require secure transport (HTTPS)

enable_device_fingerprinting: bool

Enable device fingerprinting

max_risk_score: u8

Maximum allowed risk score

validate_ip_address: bool

Enable IP address validation

max_ip_changes: u32

Maximum IP address changes per session

enable_geolocation: bool

Enable geolocation tracking

Implementations

impl SecureSessionConfig

pub fn for_high_security() -> Self

Preset for high-security environments (finance, healthcare, government).

Tighter timeouts, single-device enforcement, aggressive anomaly detection.

Example

let manager = SecureSessionManager::new(SecureSessionConfig::for_high_security());

pub fn for_mobile() -> Self

Preset for mobile / native-app sessions.

Longer lifetimes and more lenient IP-change limits to cope with cellular hand-offs, while still requiring secure transport.

Example

let manager = SecureSessionManager::new(SecureSessionConfig::for_mobile());

Trait Implementations

impl Clone for SecureSessionConfig

fn clone(&self) -> SecureSessionConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureSessionConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecureSessionConfig

fn default() -> Self

Returns a balanced default suitable for most web applications.

Field	Value	Rationale
max_lifetime	8 h	Covers a working day without forcing re-login
idle_timeout	30 min	OWASP recommendation for general web apps
max_concurrent_sessions	3	Desktop + phone + tablet
rotation_interval	1 h	Limits window for session-fixation
require_secure_transport	true	Always enforce HTTPS
enable_device_fingerprinting	true	Detect session hijacking
max_risk_score	70	Permit moderate anomalies
validate_ip_address	true	Catch session theft across IPs
max_ip_changes	3	Allow mobile network handoffs
enable_geolocation	false	Requires external MaxMind DB