Struct Session 

pub struct Session { /* private fields */ }

Parsed session variables from the incoming request.

In a Hasura + Knative setup, these come from the JWT claims forwarded by Hasura as session_variables in the action payload:

{
  "x-hasura-user-id": "user-42",
  "x-hasura-role": "customer"
}

Trust boundary (security-critical)

This framework does NOT authenticate. A Session is built from whatever the transport hands it — HTTP request headers, gRPC metadata, or the request payload’s session_variables. None of that is verified here. Identity values such as x-hasura-user-id and x-hasura-role are trusted at face value by Session::user_id, Session::role, and any handler that reads them.

You MUST deploy this behind a trusted proxy / API gateway (e.g. Hasura, or an authenticating ingress) that:

• Strips any client-supplied x-hasura-* headers/metadata on inbound requests, and
• Injects only authenticated identity claims it has verified.

Without that proxy, any caller can set x-hasura-user-id / x-hasura-role and assume any identity or role.

Source precedence

When a request carries identity in more than one place, the trusted transport channel wins over the client-controlled payload:

• gRPC: transport metadata (trusted, proxy-injected) overrides payload session_variables (client-controlled). See grpc::build_session.
• HTTP: request headers populate the session; the proxy is responsible for ensuring those headers are authenticated. See http::session_from_headers.

Treat metadata/headers as trusted only insofar as your proxy guarantees it; treat the request body as never trustworthy for identity.

Implementations

impl Session

pub fn new() -> Self

Create an empty session.

pub fn from_map(variables: HashMap<String, String>) -> Self

Create a session from a map of variables.

pub fn user_id(&self) -> Option<&str>

Get the user ID (x-hasura-user-id).

pub fn role(&self) -> Option<&str>

Get the user role (x-hasura-role).

pub fn get(&self, key: &str) -> Option<&str>

Get a session variable by key.

pub fn set(&mut self, key: impl Into<String>, value: impl Into<String>)

Set a session variable.

pub fn has(&self, key: &str) -> bool

Check if a session variable exists.

pub fn variables(&self) -> &HashMap<String, String>

Get all session variables.

Trait Implementations

impl Clone for Session

fn clone(&self) -> Session

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Session

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Session

fn default() -> Session

Returns the “default value” for a type.