Struct SessionService 

pub struct SessionService { /* private fields */ }

Issues and validates Chisel session tokens over tokenkit’s JWT service with rotation-capable secrets.

Implementations

impl SessionService

pub fn new( signing_secret: impl Into<String>, issuer: impl Into<String>, audience: impl Into<String>, ) -> Result<Self>

Creates a service.

Errors

Error::Config when the signing secret is empty or the issuer or audience is empty — a service started unconfigured must fail loudly now, not at the first login.

pub fn issue(&self, user: &UserId, role: Role) -> Result<SessionTokens>

Issues an access + refresh pair for a user with the given role.

Errors

Propagates encoding failures from the kit.

pub fn validate(&self, token: &str) -> Result<ChiselClaims>

Validates an access token into its claims.

Errors

Error::Token when the kit rejects the token (signature, expiry, audience); propagation otherwise.

pub fn refresh(&self, refresh_token: &str) -> Result<SessionTokens>

Validates a refresh token and issues a fresh pair for the same session, preserving the role recorded at login.

Errors

Same as validate.

pub fn refresh_from_claims( &self, claims: &ChiselClaims, ) -> Result<SessionTokens>

Issues a fresh pair from already-validated claims. Split from refresh so the no-role branch is reachable in tests with a hand-built claims value.

Errors

When the claims carry no role from the current vocabulary, or the subject/session ids are malformed.

Trait Implementations

impl Clone for SessionService

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionService

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.