Struct SessionStore 

pub struct SessionStore { /* private fields */ }

Low-level database-backed session store.

Handles all CRUD operations on the modo_sessions table. Application code should rarely interact with SessionStore directly; use crate::SessionManager (the axum extractor) for request-scoped session operations instead.

SessionStore is cheaply cloneable and is intended to be registered as a managed service so it can be injected into background jobs.

Implementations

impl SessionStore

pub fn new( db: &DbPool, config: SessionConfig, cookie_config: CookieConfig, ) -> Self

Create a new store backed by db with the given session and cookie config.

pub fn config(&self) -> &SessionConfig

Return a reference to the session configuration.

pub fn cookie_config(&self) -> &CookieConfig

Return a reference to the cookie configuration.

pub async fn create( &self, meta: &SessionMeta, user_id: &str, data: Option<Value>, ) -> Result<(SessionData, SessionToken), Error>

Insert a new session for user_id and return the persisted SessionData together with the plaintext SessionToken (to be set in the cookie).

After inserting, LRU eviction is applied if the user has exceeded SessionConfig::max_sessions_per_user.

pub async fn read(&self, id: &SessionId) -> Result<Option<SessionData>, Error>

Load a session by its ID. Returns None if not found (does not check expiry — call read_by_token for expiry-aware lookup).

pub async fn read_by_token( &self, token: &SessionToken, ) -> Result<Option<SessionData>, Error>

Load a non-expired session by plaintext token (hashes it internally).

Returns None if no matching, non-expired session is found.

pub async fn destroy(&self, id: &SessionId) -> Result<(), Error>

Delete a session by ID.

pub async fn rotate_token(&self, id: &SessionId) -> Result<SessionToken, Error>

Replace the token for a session with a newly generated one and return the new plaintext token. The session ID and all other fields are unchanged.

pub async fn touch( &self, id: &SessionId, new_expires_at: DateTime<Utc>, ) -> Result<(), Error>

Update last_active_at to now and set a new expires_at for a session.

pub async fn update_data( &self, id: &SessionId, data: Value, ) -> Result<(), Error>

Replace the JSON payload stored in a session.

pub async fn destroy_all_for_user(&self, user_id: &str) -> Result<(), Error>

Delete all sessions belonging to user_id.

pub async fn destroy_all_except( &self, user_id: &str, keep: &SessionId, ) -> Result<(), Error>

Delete all sessions belonging to user_id except the one identified by keep.

pub async fn list_for_user( &self, user_id: &str, ) -> Result<Vec<SessionData>, Error>

Return all non-expired sessions for user_id, ordered by most-recently-active first.

pub async fn cleanup_expired(&self) -> Result<u64, Error>

Delete all sessions whose expires_at is in the past.

Returns the number of rows deleted. Called automatically by the cleanup-job feature’s cron job.

Trait Implementations

impl Clone for SessionStore

fn clone(&self) -> SessionStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.