Struct UserAuthenticator 

pub struct UserAuthenticator { /* private fields */ }

User authentication manager.

Implementations

impl UserAuthenticator

pub fn new(user_store: Box<dyn UserStore>) -> Self

Create a new user authenticator.

pub fn with_session_expiry(self, expiry: Duration) -> Self

Create authenticator with custom session expiry.

pub fn with_max_failed_attempts(self, max: u32) -> Self

Create authenticator with custom max failed attempts.

pub fn register_user( &self, _username: &str, password: &str, identity: UserIdentity, ) -> Result<String, SecurityError>

Register a new user with Password + TOTP authentication.

Returns the TOTP secret (base32 encoded) for the user to configure their authenticator app. The username parameter is used as the lookup key - it should match identity.username.

pub fn authenticate( &self, username: &str, credential: &Credential, ) -> Result<UserSession, SecurityError>

Authenticate a user and create a session.

pub fn authenticate_password_only( &self, username: &str, password: &str, ) -> Result<UserSession, SecurityError>

Authenticate without TOTP (for testing or initial setup).

WARNING: This should only be used in development/testing or when TOTP is being initially configured.

pub fn validate_session( &self, session_id: &SessionId, ) -> Result<UserIdentity, SecurityError>

Validate a session and return the user identity.

pub fn get_session(&self, session_id: &SessionId) -> Option<UserSession>

Get a session by ID.

pub fn invalidate_session(&self, session_id: &SessionId)

Invalidate (logout) a session.

pub fn invalidate_user_sessions(&self, username: &str)

Invalidate all sessions for a user.

pub fn cleanup_expired_sessions(&self)

Clean up expired sessions.

pub fn active_session_count(&self) -> usize

Get count of active sessions.

pub fn bind_session_to_device( &self, session_id: &SessionId, device_id: DeviceId, ) -> Result<(), SecurityError>

Bind a session to a device.

pub fn unlock_account(&self, username: &str) -> Result<(), SecurityError>

Unlock a locked account (admin operation).

pub fn disable_account(&self, username: &str) -> Result<(), SecurityError>

Disable an account (admin operation).

pub fn change_password( &self, user_name: &str, old_password: &str, new_password: &str, ) -> Result<(), SecurityError>

Change a user’s password.