Struct SessionToken 

pub struct SessionToken(/* private fields */);

Opaque session token (32 random bytes).

Stored in the browser cookie as a 64-character hex string; only the SHA-256 hash is persisted to the database so a compromised DB row cannot be replayed. Debug and Display output are redacted (****) to prevent accidental logging of the raw token.

Implementations

impl SessionToken

pub fn generate() -> Self

Generate a cryptographically random 32-byte token.

pub fn from_hex(s: &str) -> Result<Self, &'static str>

Decode a token from a 64-character lowercase hex string.

Returns Err if s is not exactly 64 hex characters.

pub fn as_hex(&self) -> String

Encode the raw token bytes as a 64-character lowercase hex string.

pub fn hash(&self) -> String

Compute the SHA-256 hash of the token as a 64-character lowercase hex string.

This is the value stored in the database; the raw token is never persisted.

Trait Implementations

impl Clone for SessionToken

fn clone(&self) -> SessionToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionToken

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for SessionToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for SessionToken

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for SessionToken

fn eq(&self, other: &SessionToken) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SessionToken

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for SessionToken

impl StructuralPartialEq for SessionToken