Struct SessionManager 

pub struct SessionManager { /* private fields */ }

Manages session state with LRU eviction and hijack detection.

Thread-safe implementation using DashMap for lock-free concurrent access.

Implementations

impl SessionManager

pub fn new(config: SessionConfig) -> Self

Create a new session manager with the given configuration.

pub fn config(&self) -> &SessionConfig

Get the configuration.

pub fn is_enabled(&self) -> bool

Check if session tracking is enabled.

pub fn len(&self) -> usize

Get the number of tracked sessions.

pub fn is_empty(&self) -> bool

Check if the store is empty.

pub fn validate_request( &self, token_hash: &str, ip: IpAddr, ja4: Option<&str>, ) -> SessionDecision

Validate an incoming request’s session.

This is the primary entry point - call on every request with a session token.

Arguments

• token_hash - Hash of the session token (not the raw token)
• ip - Client IP address
• ja4 - Optional JA4 TLS fingerprint

Returns

A SessionDecision indicating the validation result.

pub fn create_session( &self, token_hash: &str, ip: IpAddr, ja4: Option<&str>, ) -> SessionState

Create a new session.

Arguments

• token_hash - Hash of the session token
• ip - Client IP address
• ja4 - Optional JA4 TLS fingerprint

Returns

The newly created session state.

pub fn get_session(&self, token_hash: &str) -> Option<SessionState>

Get session by token hash.

pub fn get_session_by_id(&self, session_id: &str) -> Option<SessionState>

Get session by session ID.

pub fn touch_session(&self, token_hash: &str)

Touch session to update activity timestamp.

pub fn bind_to_actor(&self, token_hash: &str, actor_id: &str) -> bool

Bind session to an actor.

Uses atomic operations to prevent TOCTOU race conditions when updating both the session and actor_sessions mappings.

Arguments

• token_hash - Hash of the session token
• actor_id - Actor ID to bind to

Returns

true if the binding was successful, false if session not found.

pub fn get_actor_sessions(&self, actor_id: &str) -> Vec<SessionState>

Get all sessions for an actor.

Arguments

• actor_id - Actor ID to look up

Returns

Vector of session states associated with the actor.

pub fn list_sessions_by_actor( &self, actor_id: &str, limit: usize, offset: usize, ) -> Vec<SessionState>

List sessions for an actor with pagination.

Results are sorted by last_activity (most recent first).

pub fn invalidate_session(&self, token_hash: &str) -> bool

Invalidate a session.

Arguments

• token_hash - Hash of the session token to invalidate

Returns

true if the session was invalidated, false if not found.

pub fn mark_suspicious(&self, token_hash: &str, alert: HijackAlert) -> bool

Mark session as suspicious with a hijack alert.

Uses atomic operations to prevent TOCTOU race conditions.

Arguments

• token_hash - Hash of the session token
• alert - Hijack alert to add

Returns

true if the session was marked suspicious, false if not found.

pub fn list_sessions(&self, limit: usize, offset: usize) -> Vec<SessionState>

List sessions with pagination.

Arguments

• limit - Maximum number of sessions to return
• offset - Number of sessions to skip

Returns

Vector of session states sorted by last_activity (most recent first).

pub fn list_suspicious_sessions(&self) -> Vec<SessionState>

List suspicious sessions.

Returns

Vector of session states that have been flagged as suspicious.

pub fn list_suspicious_sessions_paginated( &self, limit: usize, offset: usize, ) -> Vec<SessionState>

List suspicious sessions with pagination.

Results are sorted by last_activity (most recent first).

pub fn start_background_tasks(self: Arc<Self>)

Start background cleanup tasks.

Spawns a background task that periodically:

1. Removes expired sessions (TTL and idle timeout)
2. Evicts oldest sessions if over capacity

pub fn shutdown(&self)

Signal shutdown for background tasks.

pub fn stats(&self) -> &SessionStats

Get statistics.

pub fn clear(&self)

Clear all sessions (primarily for testing).

Trait Implementations

impl Default for SessionManager

fn default() -> Self

Returns the “default value” for a type.