Struct AuthSession 

pub struct AuthSession {
    pub token_hash: String,
    pub user_id: String,
    pub panel: String,
    pub tenant: Option<TenantId>,
    pub expires_at: Timestamp,
    pub created_at: Timestamp,
    pub impersonating: Option<String>,
    pub impersonating_until: Option<Timestamp>,
}

Shipped server-side session record: the SHA-256 hash of the client token, the user it authenticates, the panel that signed the user in, and its expiry. The raw token is never stored.

A session rides in its panel’s session_cookie, lasts SESSION_LIFETIME from login, is replaced on each login and deleted on logout; each successful login also deletes up to 500 expired sessions. It belongs to the panel that signed the user in: another panel’s gate treats the request as anonymous, and auth::user answers None there. A browser holds one session on each panel, so signing in to a second panel leaves the first alone, and renaming a panel’s prefix ends the sessions it issued. Sessions stay valid until they expire unless revoke_sessions_for_user ends them.

The row records the panel’s prefix in a non-null panel column and the selected tenant in a nullable tenant column, a TenantId Toasty stores as a Uuid on the database. A table created without them gains them by migration: add panel with the panel’s prefix as its default (ALTER TABLE auth_sessions ADD COLUMN panel TEXT NOT NULL DEFAULT '/admin'), then drop the default once every row names its panel. Auth::impersonation reads two more nullable columns, impersonating (TEXT) and impersonating_until, a timestamp: a table created without them gains them by ALTER TABLE ... ADD COLUMN.

Fields

token_hash: String

Hex-encoded SHA-256 of the session token.

user_id: String

PanelUser::user_id of the authenticated user.

panel: String

The prefix of the panel that signed the user in (e.g. /admin): the only panel the session authenticates.

tenant: Option<TenantId>

The tenant the user selected; None acts for the first.

expires_at: Timestamp

Indexed for the login sweep’s range scan on this column.

created_at: Timestamp

impersonating: Option<String>

PanelUser::user_id of the user the session’s user acts as, through Auth::impersonation; None while they act as themselves.

impersonating_until: Option<Timestamp>

When acting as impersonating ends on its own.

Implementations

impl AuthSession

pub fn fields() -> AuthSessionFields<AuthSession>

Returns a handle used to reference AuthSession’s fields when building query expressions.

pub async fn get_by_token_hash( executor: &mut dyn Executor, token_hash: impl IntoExpr<FieldExprTarget<String>>, ) -> Result<AuthSession>

Fetches the single AuthSession where token_hash matches, erroring if none exists.

pub fn update_by_token_hash( token_hash: impl IntoExpr<FieldExprTarget<String>>, ) -> AuthSessionUpdate

Returns a builder that updates the AuthSession where token_hash matches.

pub async fn delete_by_token_hash( executor: &mut dyn Executor, token_hash: impl IntoExpr<FieldExprTarget<String>>, ) -> Result<()>

Deletes the AuthSession where token_hash matches.

pub fn filter_by_token_hash( token_hash: impl IntoExpr<FieldExprTarget<String>>, ) -> AuthSessionQuery

Returns a query selecting the AuthSession records where token_hash matches.

pub async fn get_by_user_id( executor: &mut dyn Executor, user_id: impl IntoExpr<FieldExprTarget<String>>, ) -> Result<AuthSession>

Fetches the single AuthSession where user_id matches, erroring if none exists.

pub fn update_by_user_id( user_id: impl IntoExpr<FieldExprTarget<String>>, ) -> AuthSessionUpdate

Returns a builder that updates the AuthSession where user_id matches.

pub async fn delete_by_user_id( executor: &mut dyn Executor, user_id: impl IntoExpr<FieldExprTarget<String>>, ) -> Result<()>

Deletes the AuthSession where user_id matches.

pub fn filter_by_user_id( user_id: impl IntoExpr<FieldExprTarget<String>>, ) -> AuthSessionQuery

Returns a query selecting the AuthSession records where user_id matches.

pub async fn get_by_expires_at( executor: &mut dyn Executor, expires_at: impl IntoExpr<FieldExprTarget<Timestamp>>, ) -> Result<AuthSession>

Fetches the single AuthSession where expires_at matches, erroring if none exists.

pub fn update_by_expires_at( expires_at: impl IntoExpr<FieldExprTarget<Timestamp>>, ) -> AuthSessionUpdate

Returns a builder that updates the AuthSession where expires_at matches.

pub async fn delete_by_expires_at( executor: &mut dyn Executor, expires_at: impl IntoExpr<FieldExprTarget<Timestamp>>, ) -> Result<()>

Deletes the AuthSession where expires_at matches.

pub fn filter_by_expires_at( expires_at: impl IntoExpr<FieldExprTarget<Timestamp>>, ) -> AuthSessionQuery

Returns a query selecting the AuthSession records where expires_at matches.

pub fn create() -> AuthSessionCreate

Returns a builder that inserts a new AuthSession record.

Typically constructed through the toasty::create! macro.

pub fn create_many() -> CreateMany<AuthSession>

Returns a builder that inserts multiple AuthSession records at once.

pub fn update(&mut self) -> AuthSessionUpdate<&mut Self>

Returns a builder that updates this AuthSession record in place.

pub fn all() -> AuthSessionQuery

Returns a query that selects every AuthSession record.

pub fn filter(expr: Expr<bool>) -> AuthSessionQuery

Returns a query selecting the AuthSession records matching expr.

pub fn delete(self) -> Delete<()>

Consumes this AuthSession and returns a statement that deletes its record.

impl AuthSession

pub fn upsert_by_token_hash( token_hash: impl IntoExpr<FieldExprTarget<String>>, ) -> AuthSessionUpsertByTokenHash

Returns a builder that creates AuthSession or updates the record whose token_hash constraint matches.

The target arguments initialize a new record and remain unchanged when an existing record is updated.

Trait Implementations

impl Assign<AuthSession> for AuthSession

fn into_assignment(self) -> Assignment<AuthSession>

Convert into an Assignment<T> value.

fn assign(self, assignments: &mut Assignments, projection: Projection)

where Self: Sized,

Record one or more assignments into the given [Assignments] map at the specified projection.

impl Clone for AuthSession

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthSession

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl IntoExpr<AuthSession> for AuthSession

fn into_expr(self) -> Expr<AuthSession>

Consume self and produce an Expr<T>.

fn by_ref(&self) -> Expr<AuthSession>

Produce an Expr<T> from a reference without consuming self.

impl IntoStatement for &AuthSession

type Returning = AuthSession

The type this statement produces when executed.

fn into_statement(self) -> Statement<AuthSession>

Consume self and produce the Statement.

impl IntoStatement for &mut AuthSession

type Returning = AuthSession

The type this statement produces when executed.

fn into_statement(self) -> Statement<AuthSession>

Consume self and produce the Statement.

impl IntoStatement for AuthSession

type Returning = AuthSession

The type this statement produces when executed.

fn into_statement(self) -> Statement<AuthSession>

Consume self and produce the Statement.

impl Load for AuthSession

type Output = AuthSession

The concrete type produced by load.

fn ty() -> Type

Returns the stmt::Type that describes values of this type.

fn load(value: Value) -> Result<Self>

Deserialize a database Value into Self::Output.

fn reload(target: &mut Self, value: Value) -> Result<()>

Reload the value in-place from a value returned by the database.

fn ty_relation() -> Type

Returns the stmt::Type used when this type appears as a relation target. The default delegates to ty().

fn load_relation(value: Value) -> Result<Self::Output, Error>

Deserialize a value that was loaded as a relation target.

impl Model for AuthSession

type Query<__T> = AuthSessionQuery<__T>

Query builder for this model, parameterized by what it executes to.

type Create = AuthSessionCreate

Create builder type for this model

type Update<'a> = AuthSessionUpdate<&'a mut AuthSession>

Update builder type for this model

type UpdateQuery = AuthSessionUpdate

Update by query builder type for this model

type Path<__Origin> = AuthSessionFields<__Origin>

A typed path from Origin into this model.

type PrimaryKey = String

The model’s primary key type.

type ManyField<__Origin> = AuthSessionListFields<__Origin>

The field accessor type used when this model appears as the “many” side of a has-many relation, parameterized by the origin model.

type OneField<__Origin, __Target> = AuthSessionFields<__Origin, __Target>

The field accessor for a singular relation to this model, parameterized by the origin and path target.

fn id() -> ModelId

Unique identifier for this model within the schema.

fn schema() -> Model

Returns the schema definition for this model.

fn register(model_set: &mut ModelSet)

Register this model and all models reachable through its fields into the given ModelSet.

fn new_path<__Origin>(path: Path<__Origin, Self>) -> Self::Path<__Origin>

Construct a model path from a Path targeting this model.

fn new_many_field<__Origin>( path: Path<__Origin, List<Self>>, ) -> AuthSessionListFields<__Origin>

Construct a ManyField from a path targeting a list of this model.

fn find_by_primary_key(id: Expr<Self::PrimaryKey>) -> Self::Query<List<Self>>

Build a query that filters this model by its primary key.

fn wrap_query<__T>(stmt: Query<__T>) -> Self::Query<__T>

Wrap a raw statement-level Query in this model’s query builder, preserving the result shape T. This is the single constructor generic code uses to build any query shape; callers narrow at the statement level (.one(), .first()) before wrapping.

fn query_one(query: Self::Query<List<Self>>) -> Self::Query<Self>

Narrow a list query to a single-row query (errors at exec time if no row matches). Used by the codegen for non-nullable relation accessors.

fn query_first(query: Self::Query<List<Self>>) -> Self::Query<Option<Self>>

Narrow a list query to an optional single-row query. Used by the codegen for nullable relation accessors.

fn field_name_to_id(name: &str) -> FieldId

Map a field name string to its FieldId.

fn new_root_path() -> Self::Path<Self>

Construct a path rooted at this model.

fn path_root() -> Path<Self, Self>

An identity Path rooted at this model.

fn path_field<U>(index: usize) -> Path<Self, U>

A Path from this model to the field at index.

fn path_model_list() -> Path<List<Self>, List<Self>>

An identity Path rooted at a list of this model, used as the root of has-many relation scopes.

fn new_create() -> Self::Create

Return a fresh, default-initialized create builder.

impl ModelCodegen for AuthSession

fn to_relation_expr(&self, fields: &[&str]) -> Expr

Encode referenced fields so the engine can resolve a relation key.

fn new_one_field<__Origin, __Target>( path: Path<__Origin, __Target>, ) -> Self::OneField<__Origin, __Target>

Construct the field accessor for a singular relation to this model.

impl UpdateTarget for &mut AuthSession

type Returning = AuthSession

The type parameter for the typed Update<R> statement.

fn to_update_stmt(&mut self, assignments: Assignments) -> Update<AuthSession>

Build the update statement by combining this target’s selection with the provided assignments.

fn apply_result(self, value: Value) -> Result<()>

Apply the result of an update operation.

impl ViaTarget for AuthSession

type Query = AuthSessionQuery

The query builder returned by the generated has-many-via navigation method.

type Path<__Origin> = <AuthSession as Model>::ManyField<__Origin>

The typed path handle a #[has_many(via = …)] field’s accessor returns, parameterized by the origin model. Mirrors Model::Path for the via-many case.

fn new_path<__Origin>( path: Path<__Origin, List<AuthSession>>, ) -> Self::Path<__Origin>

Build the Path handle from the typed path reaching this terminal. A model terminal wraps the path in its chainable ManyField; a scalar terminal is a leaf, so the path is the handle.

fn via_field_ty(singular: Name, path: Path) -> FieldTy

Build the FieldTy::Via for a #[has_many(via = …)] field whose terminal element type is Self.

fn make_via_query(assoc: Association<List<AuthSession>>) -> Self::Query

Wrap a via-field association into the navigation query.