Struct SessionManager 

pub struct SessionManager<S: AuthSchema> { /* private fields */ }

Session manager handles session creation, validation, and cleanup

Implementations

impl<S: AuthSchema> SessionManager<S>

pub fn finish_response( &self, req: &AuthRequest, response: &mut AuthResponse, ) -> AuthResult<()>

Finalize session cookies and Bearer response headers.

impl<S: AuthSchema> SessionManager<S>

pub fn new(config: Arc<AuthConfig>, database: Arc<dyn AuthStore<S>>) -> Self

pub fn with_adapter_user_fields(self, fields: UserConfig) -> Self

Select adapter transforms separately from public field visibility.

pub fn with_user_metadata(self, metadata: MetadataMap) -> Self

Attach enabled user plugin schemas for database and cache projections.

pub async fn session_view( &self, session: &impl AuthSession, ) -> AuthResult<SessionView>

pub async fn internal_session_view( &self, session: &impl AuthSession, ) -> AuthResult<SessionView>

Include hidden session fields for trusted callbacks before public output filtering.

pub async fn internal_data( &self, user: &impl AuthUser, session: &impl AuthSession, ) -> AuthResult<SessionData>

Project an adapter result without removing fields available to trusted callbacks.

pub async fn set_session_cookie( &self, req: &AuthRequest, data: SessionData, dont_remember: Option<bool>, ) -> AuthResult<()>

Write session credentials and retain the supplied identity for endpoint after hooks.

pub async fn set_native_session_cookie( &self, req: &AuthRequest, data: NativeSessionData, dont_remember: Option<bool>, ) -> AuthResult<()>

Write credentials while preserving the native User value for endpoint after hooks.

pub async fn set_session_cookie_in_transaction( &self, req: &AuthRequest, data: SessionData, dont_remember: Option<bool>, transaction: &dyn AuthTransaction<S>, ) -> AuthResult<()>

Issue credentials while keeping signing-key reads and writes in the active transaction.

pub fn with_cookie_signer( self, signer: Option<Arc<dyn SessionCookieSigner<S>>>, ) -> Self

Install a plugin-provided signer without coupling core to the plugin implementation.

pub async fn create_session( &self, user: &impl AuthUser, ip_address: Option<String>, user_agent: Option<String>, ) -> AuthResult<SessionView>

Create a new session for a user

pub async fn create_session_for_id( &self, user_id: SchemaValue<String>, ip_address: Option<String>, user_agent: Option<String>, ) -> AuthResult<SessionView>

Preserve the selected runtime User ID, including an omitted ID, during session creation.

pub async fn create_session_with_lifetime( &self, user: &impl AuthUser, ip_address: Option<String>, user_agent: Option<String>, expires_in: Duration, ) -> AuthResult<SessionView>

Create a session with a lifetime that overrides the configured default.

pub async fn create_session_for_id_with_lifetime( &self, user_id: SchemaValue<String>, ip_address: Option<String>, user_agent: Option<String>, expires_in: Duration, ) -> AuthResult<SessionView>

Create a session from a native User ID with an explicit lifetime.

pub async fn get_session(&self, token: &str) -> AuthResult<Option<SessionView>>

Read a session directly from the server store and refresh its expiry.

pub async fn resolve( &self, req: &AuthRequest, read: SessionRead, ) -> AuthResult<SessionResolution>

Resolve an HTTP session and queue any cookie updates on the request.

pub async fn resolve_native( &self, req: &AuthRequest, read: SessionRead, ) -> AuthResult<SessionResolution<NativeSessionData>>

Resolve a session while preserving the User value selected by the adapter.

pub async fn write_cache( &self, req: &AuthRequest, data: &SessionData, dont_remember: bool, ) -> AuthResult<()>

Write the configured cache from authenticated session data.

pub fn dont_remember(&self, req: &AuthRequest) -> bool

Read the signed marker for a browser-session-only login.

pub fn clear_cookies(&self, req: &AuthRequest) -> AuthResult<()>

Expire session credentials and every cache chunk received on the request.

pub async fn delete_session(&self, token: &str) -> AuthResult<()>

Delete a session

pub async fn delete_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<()>

Delete all sessions for a user

pub async fn list_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<Vec<SessionView>>

Get all active sessions for a user

pub async fn list_user_session_views( &self, user_id: impl AsRef<str>, ) -> AuthResult<Vec<SessionView>>

Project active sessions while preserving cached undefined application fields.

pub async fn revoke_session(&self, token: &str) -> AuthResult<bool>

Revoke a specific session by token

pub async fn revoke_all_user_sessions( &self, user_id: impl AsRef<str>, ) -> AuthResult<usize>

Revoke all sessions for a user

pub async fn revoke_other_user_sessions( &self, user_id: impl AsRef<str>, current_token: &str, ) -> AuthResult<usize>

Revoke all sessions for a user except the current one

pub async fn cleanup_expired_sessions(&self) -> AuthResult<usize>

Cleanup expired sessions

pub fn is_session_fresh(&self, session: &impl AuthSession) -> bool

Check whether a session is “fresh” (created recently enough for sensitive operations like password change or account deletion).

Returns true when fresh_age is set and session.created_at() + fresh_age > now. If fresh_age is None, the session is never considered fresh.

pub fn validate_token_format(&self, token: &str) -> bool

Validate session token format

pub fn extract_session_token(&self, req: &AuthRequest) -> Option<String>

Extract and verify a session cookie or an explicitly enabled Bearer token.

Trait Implementations

impl<S: AuthSchema> Clone for SessionManager<S>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.