Struct SessionConfigBuilder 

pub struct SessionConfigBuilder { /* private fields */ }

A builder for SessionConfig

Implementations

impl SessionConfigBuilder

pub fn default_duration(self, duration: Duration) -> Self

Set the default session duration.

Example

use std::time::Duration;
let config = SessionConfigBuilder::default()
    .default_duration(Duration::from_secs(3600))
    .build();

pub fn max_duration(self, duration: Duration) -> Self

Set the maximum session duration.

Example

let config = SessionConfigBuilder::default()
    .max_duration(Duration::from_secs(86400))
    .build();

pub fn idle_timeout(self, timeout: Duration) -> Self

Set the session idle timeout.

Example

let config = SessionConfigBuilder::default()
    .idle_timeout(Duration::from_secs(900))
    .build();

pub fn rotate_on_privilege_escalation(self, rotate: bool) -> Self

Set whether to rotate session IDs on privilege escalation.

Example

let config = SessionConfigBuilder::default()
    .rotate_on_privilege_escalation(true)
    .build();

pub fn rotate_periodically(self, rotate: bool) -> Self

Set whether to rotate session IDs periodically.

Example

let config = SessionConfigBuilder::default()
    .rotate_periodically(true)
    .rotation_interval(Duration::from_secs(3600))
    .build();

pub fn rotation_interval(self, interval: Duration) -> Self

Set the rotation interval.

Example

let config = SessionConfigBuilder::default()
    .rotate_periodically(true)
    .rotation_interval(Duration::from_secs(1800))
    .build();

pub fn max_concurrent_sessions(self, max: u32) -> Self

Set the maximum concurrent sessions per user.

Example

let config = SessionConfigBuilder::default()
    .max_concurrent_sessions(5)
    .build();

pub fn allowed_countries(self, countries: Vec<String>) -> Self

Set the list of allowed countries (ISO 3166-1 alpha-2 codes).

Only meaningful when enforce_geographic_restrictions is enabled (e.g. via for_high_security()).

pub fn for_web_app() -> Self

Preset for typical web applications.

1-hour default sessions, 24-hour max, 30-minute idle, 5 concurrent.

Example

let config = SessionConfigBuilder::for_web_app().build();

pub fn for_api_service() -> Self

Preset for stateless API services.

Short-lived sessions (15-min default, 1-hour max, 10-min idle), no rotation, no fingerprinting — optimised for machine-to-machine or single-page-app API calls.

Example

let config = SessionConfigBuilder::for_api_service().build();

pub fn for_high_security() -> Self

Preset for high-security environments (finance, healthcare).

30-minute sessions, 5-minute idle, aggressive rotation, single concurrent session, MFA enforced on every new device.

Example

let config = SessionConfigBuilder::for_high_security().build();

pub fn build(self) -> SessionConfig

Build the SessionConfig.

Example

let config = SessionConfigBuilder::default()
    .default_duration(Duration::from_secs(7200))
    .max_concurrent_sessions(3)
    .build();

Trait Implementations

impl Default for SessionConfigBuilder

fn default() -> Self

Returns the “default value” for a type.