Struct SessionConfig 

pub struct SessionConfig {
    pub session_ttl_secs: u64,
    pub cookie_name: String,
    pub validate_fingerprint: bool,
    pub touch_interval_secs: u64,
    pub max_sessions_per_user: usize,
    pub trusted_proxies: Vec<String>,
}

Configuration for the session subsystem.

All fields have sane defaults (see Default). Deserialises from YAML/TOML with #[serde(default)], so you only need to specify the fields you want to override.

Example (YAML)

session_ttl_secs: 86400
cookie_name: "_sess"
validate_fingerprint: true
touch_interval_secs: 600
max_sessions_per_user: 5
trusted_proxies:
  - "10.0.0.0/8"

Fields

session_ttl_secs: u64

Session lifetime in seconds (default: 2 592 000 = 30 days).

cookie_name: String

Name of the HTTP cookie that carries the session token (default: "_session").

validate_fingerprint: bool

Whether to reject sessions whose request fingerprint changed since creation (default: true). Disabling this reduces hijack protection but allows users behind rotating IPs or proxies to keep their session.

touch_interval_secs: u64

Minimum number of seconds between consecutive touch (expiry renewal) DB writes (default: 300 = 5 minutes).

max_sessions_per_user: usize

Maximum number of concurrent active sessions per user before the least-recently-used session is evicted (default: 10).

trusted_proxies: Vec<String>

CIDR ranges of trusted reverse-proxy addresses. When non-empty, the X-Forwarded-For / X-Real-IP headers are only trusted when the TCP connection originates from one of these ranges (default: empty = trust proxy headers unconditionally).

Trait Implementations

impl Clone for SessionConfig

fn clone(&self) -> SessionConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SessionConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SessionConfig

where SessionConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.