Struct SessionGuard 

pub struct SessionGuard<U: Authenticatable> { /* private fields */ }

Authenticates from the request’s session.

Requires the StartSession middleware to have run — without it there is no session, and this guard reports nobody rather than pretending.

Implementations

impl<U: Authenticatable> SessionGuard<U>

pub fn new(name: impl Into<String>, provider: Arc<dyn UserProvider<U>>) -> Self

A session guard named name.

pub fn provider(&self) -> &Arc<dyn UserProvider<U>>

The user provider this guard looks users up through.

Trait Implementations

impl<U: Authenticatable> Guard<U> for SessionGuard<U>

fn name(&self) -> &str

A label for diagnostics — "session", "api".

fn user<'a>(&'a self, request: &'a Request) -> BoxFuture<'a, Result<Option<U>>>

The user this request belongs to, or None if it is unauthenticated.

fn abilities<'a>( &'a self, request: &'a Request, ) -> BoxFuture<'a, Result<Abilities>>

What the credential in this request was issued to do.

impl<U: Authenticatable> StatefulGuard<U> for SessionGuard<U>

fn attempt<'a>( &'a self, request: &'a Request, credentials: &'a Credentials, ) -> BoxFuture<'a, Result<Option<U>>>

Verify credentials and, on success, log the user into this request’s session. Returns the user, or None if the credentials were wrong.

fn login<'a>( &'a self, request: &'a Request, user: &'a U, ) -> BoxFuture<'a, Result<()>>

Log an already-verified user into this request’s session.

fn logout<'a>(&'a self, request: &'a Request) -> BoxFuture<'a, Result<()>>

End the session behind this request.