Struct Session 

pub struct Session(/* private fields */);

A handle to the current visitor’s session.

Cloneable and cheap; all clones share one map. Extract it as a handler argument.

Implementations

impl Session

pub fn get(&self, key: &str) -> Option<String>

Read a value.

pub fn set(&self, key: impl Into<String>, value: impl Into<String>)

Insert or replace a value.

pub fn remove(&self, key: &str)

Remove a value.

pub fn clear(&self)

Drop every value.

Call this on logout. Rotating rather than reusing a session is what stops a fixated session id from surviving a privilege change.

pub fn rotate(&self)

Keep the contents but ask the store for a new identifier.

This is the session fixation defence for a server-side store: an attacker who plants a known session id must not still hold a valid one after the victim’s privileges change. Call it on login, and on any other privilege change, when you want to keep what is already in the session (a cart, a locale) rather than dropping it the way clear does.

It works by removing SESSION_ID_KEY, which a server-side store uses to remember which record this session is, so the next write mints a new one. CookieStore keeps no identifier and is unaffected: its payload is re-signed on every change already, so a planted cookie never carries the post-login contents.

Trait Implementations

impl Clone for Session

fn clone(&self) -> Session

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Session

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Session

fn default() -> Session

Returns the “default value” for a type.

impl FromCallParts for Session

fn from_call_parts<'life0, 'async_trait>( call: &'life0 mut Call, ) -> Pin<Box<dyn Future<Output = Result<Self>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Build Self from a mutable borrow of the call, or return an Error (which the handler renders as the response).