Struct AuthManager 

pub struct AuthManager<S, A, const SESSION_LEN: usize = DEFAULT_SESSION_LEN, const HASH_LEN: usize = DEFAULT_HASH_LEN, const PEPPER_LEN: usize = DEFAULT_PEPPER_LEN, const SALT_LEN: usize = DEFAULT_SALT_LEN, const ACCOUNT_LOCK_SHARDS: usize = 4096>
where
    S: KVTrait<[u8; SESSION_LEN], SessionValue<SESSION_LEN>> + Send + Sync,
    A: KVTrait<str, AccountValue<SALT_LEN, HASH_LEN, SESSION_LEN>> + Send + Sync,
{
    pub sessions: S,
    pub accounts: A,
    pub session_timeout: Duration,
    pub account_timeout: Duration,
    pub password_hasher: Argon2<'static>,
    pub pepper: [u8; PEPPER_LEN],
    /* private fields */
}

Main AuthManager

• sessions はキャッシュ扱い。必要なら verify して primary_account を落とす。
• account 側が正。session はキャッシュ更新

Fields

sessions: S

accounts: A

session_timeout: Duration

account_timeout: Duration

password_hasher: Argon2<'static>

pepper: [u8; PEPPER_LEN]

Implementations

impl<S, A, const SESSION_LEN: usize, const HASH_LEN: usize, const PEPPER_LEN: usize, const SALT_LEN: usize, const ACCOUNT_LOCK_SHARDS: usize> AuthManager<S, A, SESSION_LEN, HASH_LEN, PEPPER_LEN, SALT_LEN, ACCOUNT_LOCK_SHARDS>

where S: KVTrait<[u8; SESSION_LEN], SessionValue<SESSION_LEN>> + Send + Sync, A: KVTrait<str, AccountValue<SALT_LEN, HASH_LEN, SESSION_LEN>> + Send + Sync,

pub fn new( sessions: S, accounts: A, session_timeout: Duration, account_timeout: Duration, hash_config: HashConfig<PEPPER_LEN>, ) -> Self

pub fn create_session(&self) -> [u8; SESSION_LEN]

session_id はランダム生成。衝突したらリトライ。

pub fn delete_session(&self, session_id: &[u8; SESSION_LEN]) -> bool

pub fn get_and_verify_session( &self, session_id: &[u8; SESSION_LEN], ) -> Option<SessionValue<SESSION_LEN>>

ガード入り Noneならcreate sessionするなりするとよい

pub fn update_or_gc_session( &self, session_id: &[u8; SESSION_LEN], ) -> Option<SessionValue<SESSION_LEN>>

pub fn gc_sessions( &self, session_id: &[u8; SESSION_LEN], ) -> Option<SessionValue<SESSION_LEN>>

pub fn set_primary_account( &self, session_id: &[u8; SESSION_LEN], username: &str, ) -> bool

pub fn add_account(&self, username: &str, password: &str)

pub fn delete_account(&self, username: &str) -> bool

pub fn get_account( &self, username: &str, ) -> Option<AccountValue<SALT_LEN, HASH_LEN, SESSION_LEN>>

pub fn auth_login( &self, session_id: &[u8; SESSION_LEN], username: &str, password: &str, ) -> bool

pub fn auth_verify( &self, session_id: &[u8; SESSION_LEN], username: &str, ) -> bool

認可

pub fn auth_logout( &self, session_id: &[u8; SESSION_LEN], username: &str, ) -> bool

logout は account 側だけ更新