Struct SessionRegistry 

pub struct SessionRegistry { /* private fields */ }

In-memory session registry: opaque random session-id → Session.

The signed cookie carries a random, server-minted session id (sid), not the DID: the DID is never attacker-supplied, so a session cookie cannot be forged by resolving a victim’s DID — an attacker would need both the server’s HMAC secret and to guess a 256-bit random sid that only exists server-side. Sessions are therefore also revocable (drop the sid → the cookie is dead) and are cleared on restart (every client re-logs in; the durable OAuth session still lives in the sidecar’s store).

Implementations

impl SessionRegistry

pub fn new() -> Self

A fresh, empty registry.

pub fn create(&self, session: Session) -> String

Create a new session for session, returning its freshly-minted random session id (the value the signed cookie carries).

pub fn get(&self, sid: &str) -> Option<Session>

Look up a session by its opaque session id.

pub fn remove(&self, sid: &str)

Drop a session by its session id (logout / revoke).

Trait Implementations

impl Clone for SessionRegistry

fn clone(&self) -> SessionRegistry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for SessionRegistry

fn default() -> SessionRegistry

Returns the “default value” for a type.