Struct SessionManager 

pub struct SessionManager { /* private fields */ }

Request-scoped session manager, available as an axum extractor.

Inject SessionManager as a handler parameter to read or modify the session for the current request. The session middleware must be installed via crate::layer for the extractor to work; if the middleware is missing the extractor returns an internal error.

Changes made through SessionManager (authentication, logout, token rotation, data writes) are applied to the HTTP response cookie automatically by the middleware after the handler returns.

Implementations

impl SessionManager

pub async fn authenticate(&self, user_id: &str) -> Result<(), Error>

Create a session for the given user. Destroys any existing session first (fixation prevention).

pub async fn authenticate_with( &self, user_id: &str, data: Value, ) -> Result<(), Error>

Create a session with custom data attached.

Any existing session is destroyed before the new one is created to prevent session-fixation attacks.

pub async fn logout(&self) -> Result<(), Error>

Destroy the current session. Cookie is removed automatically.

pub async fn logout_all(&self) -> Result<(), Error>

Destroy ALL sessions for the current user.

pub async fn logout_other(&self) -> Result<(), Error>

Destroy all sessions for the current user except the current one.

pub async fn revoke(&self, id: &SessionId) -> Result<(), Error>

Destroy a specific session by ID (for “manage my devices” UI). Only works on sessions owned by the current user.

pub async fn rotate(&self) -> Result<(), Error>

Regenerate the session token without changing the session ID.

pub async fn current(&self) -> Option<SessionData>

Access the current session data (if authenticated).

pub async fn user_id(&self) -> Option<String>

Get the current user ID.

pub async fn is_authenticated(&self) -> bool

Check if a session is active.

pub async fn list_my_sessions(&self) -> Result<Vec<SessionData>, Error>

List all active sessions for the authenticated user.

pub async fn get<T: DeserializeOwned>( &self, key: &str, ) -> Result<Option<T>, Error>

Get a typed value from the session data by key.

pub async fn set<T: Serialize>(&self, key: &str, value: &T) -> Result<(), Error>

Set a single key in the session data (immediate DB write).

pub async fn remove_key(&self, key: &str) -> Result<(), Error>

Remove a key from the session data (immediate DB write).

Trait Implementations

impl<S: Send + Sync> FromRequestParts<S> for SessionManager

type Rejection = Error

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, _state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.