Struct CookieSessionService 

pub struct CookieSessionService { /* private fields */ }

Long-lived service for cookie-backed sessions.

CookieSessionService wraps a [SessionStore], a cookie signing Key, and the full CookieSessionsConfig. It is constructed once at startup, held in application state, and used by the session middleware and by cross-transport management endpoints.

Construction

let svc = CookieSessionService::new(db, config)?;

Construction validates that the cookie secret meets the minimum length requirement and fails fast at startup if it does not.

Implementations

impl CookieSessionService

pub fn new(db: Database, config: CookieSessionsConfig) -> Result<Self>

Construct a new CookieSessionService.

Derives the HMAC signing key from config.cookie.secret. Fails if the secret is shorter than 64 characters.

Errors

Returns Error::internal if the cookie secret is too short.

pub async fn list(&self, user_id: &str) -> Result<Vec<Session>>

List all active (non-expired) sessions for the given user.

Errors

Returns an error if the database query fails.

pub async fn revoke(&self, user_id: &str, id: &str) -> Result<()>

Revoke a specific session by its ULID identifier.

Looks up the session row by id, verifies that it belongs to user_id, and destroys it. Returns 404 auth:session_not_found if the session does not exist or belongs to a different user.

Errors

Returns 404 auth:session_not_found on ownership mismatch, or an internal error if the database operation fails.

pub async fn revoke_all(&self, user_id: &str) -> Result<()>

Revoke all sessions for the given user.

Errors

Returns an error if the database delete fails.

pub async fn revoke_all_except( &self, user_id: &str, keep_id: &str, ) -> Result<()>

Revoke all sessions for the given user except the one with keep_id.

Used to implement “log out other devices” while keeping the caller’s current session active.

Errors

Returns an error if the database delete fails.

pub async fn cleanup_expired(&self) -> Result<u64>

Delete all expired sessions from the store.

Returns the number of rows deleted. Schedule this periodically (e.g. via a cron job) to keep the authenticated_sessions table small.

Errors

Returns an error if the database delete fails.

pub fn layer(&self) -> CookieSessionLayer

Build a CookieSessionLayer from this service.

Convenience method so callers can write service.layer() instead of session::layer(service.clone()).

Trait Implementations

impl Clone for CookieSessionService

fn clone(&self) -> CookieSessionService

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.