Struct SessionManager 

pub struct SessionManager<S: SessionStorage, A: AuditStorage> { /* private fields */ }

Main session manager

Implementations

impl<S: SessionStorage, A: AuditStorage> SessionManager<S, A>

pub fn new( storage: S, config: SessionConfig, audit_logger: AuditLogger<A>, ) -> Self

Create a new session manager.

The storage backend persists session data, config specifies lifetimes and security policies, and audit_logger records session lifecycle events.

pub async fn create_session( &self, user_id: &str, device_info: DeviceInfo, metadata: RequestMetadata, ) -> Result<Session>

Create a new session

pub async fn validate_session( &self, session_id: &str, metadata: RequestMetadata, ) -> Result<Option<Session>>

Validate and refresh a session

pub async fn revoke_session(&self, session_id: &str) -> Result<()>

Revoke a session

pub async fn revoke_all_user_sessions(&self, user_id: &str) -> Result<u32>

Revoke all sessions for a user

pub async fn get_user_sessions( &self, user_id: &str, include_inactive: bool, ) -> Result<Vec<Session>>

List sessions for a user.

When include_inactive is false, only SessionState::Active sessions are returned.

Prefer list_user_sessions with a SessionFilter for self-documenting call sites.

pub async fn list_user_sessions( &self, user_id: &str, filter: SessionFilter, ) -> Result<Vec<Session>>

List sessions for a user with a typed SessionFilter.

use auth_framework::auth_operations::SessionFilter;

let active = mgr.list_user_sessions(user_id, SessionFilter::ActiveOnly).await?;

pub async fn cleanup_expired_sessions(&self) -> Result<u32>

Remove all expired sessions from storage and return how many were cleaned up.

pub fn generate_device_fingerprint(&self, metadata: &RequestMetadata) -> String

Compute a device fingerprint from the request metadata (IP, User-Agent, etc.).

pub fn validate_device_fingerprint( &self, session: &Session, metadata: &RequestMetadata, ) -> bool

Check whether metadata produces a fingerprint matching the session’s stored value.

pub async fn suspend_session( &self, session_id: &str, reason: &str, ) -> Result<()>

Suspend suspicious sessions

pub async fn update_session_data( &self, session_id: &str, key: &str, value: &str, ) -> Result<()>

Update session data