Struct SessionManager 

pub struct SessionManager { /* private fields */ }

Session manager for handling authentication sessions

API keys are stored securely via the KeyStore trait (system keyring, encrypted file, etc.). The session file only contains non-sensitive metadata.

Implementations

impl SessionManager

pub fn new(session_file: PathBuf, key_store: Option<Box<dyn KeyStore>>) -> Self

Create a new session manager

Arguments

• session_file - Path to the session JSON file
• key_store - Optional secure key store for API keys. If None, API keys are stored in the session file as a fallback.

pub fn load(&self) -> Result<Option<AuthSession>>

Load session from disk

pub fn save(&self, session: &AuthSession, api_key: Option<&str>) -> Result<()>

Save session to disk and optionally store API key in key store

The API key is stored in the key store if available, not in the session file.

pub fn delete(&self) -> Result<()>

Delete session from disk and key store

pub fn is_authenticated(&self) -> Result<bool>

Check if user is authenticated (has valid session)

pub fn get_session(&self) -> Result<Option<AuthSession>>

Get the current session if valid

pub fn get_api_key(&self) -> Result<Option<Zeroizing<String>>>

Get the API key for the current session

Tries key store first, falls back to session file for backwards compatibility. Returns Zeroizing to ensure key is cleared from memory when dropped.

pub fn create_session( response: AuthResponse, backend: String, _api_key: String, ) -> AuthSession

Create session from authentication response

pub fn migrate_to_key_store(&self) -> Result<bool>

Migrate legacy session (with api_key in file) to key store

Call this during login to migrate old sessions to secure storage.

pub fn session_file(&self) -> &Path

Get the session file path