Struct KeyspaceSessionStore 

pub struct KeyspaceSessionStore { /* private fields */ }

Thin newtype around KeyspaceHandle that implements SessionStore.

Newtype rather than blanket-impl-on-KeyspaceHandle so the trait surface stays decoupled from the storage type (orphan rule + future-proofing — a different store would implement SessionStore on a different newtype).

Implementations

impl KeyspaceSessionStore

pub fn new(inner: KeyspaceHandle) -> Self

pub fn handle(&self) -> &KeyspaceHandle

Trait Implementations

impl Clone for KeyspaceSessionStore

fn clone(&self) -> KeyspaceSessionStore

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl SessionStore for KeyspaceSessionStore

type Error = AppError

Wrapped error type. Conversion to AuthError::Internal is the handler’s responsibility (via ? and the backend’s From<AuthError> impl).

fn store_session<'life0, 'life1, 'async_trait>( &'life0 self, s: &'life1 Session, ) -> Pin<Box<dyn Future<Output = Result<(), Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Persist a session under its session_id.

fn get_session<'life0, 'life1, 'async_trait>( &'life0 self, session_id: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<Session>, Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Load a session by session_id. Ok(None) if missing or expired-and-swept.

fn delete_session<'life0, 'life1, 'async_trait>( &'life0 self, session_id: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<(), Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Delete a session and its refresh-token reverse-index.

fn store_refresh_index<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, refresh_token: &'life1 str, session_id: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<(), Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Persist the refresh_token → session_id reverse-index. Implementors choose whether to hash the key (recommended; vti-common does, did-hosting historically does not) — the handler treats the token as an opaque bearer.

fn take_session_id_by_refresh<'life0, 'life1, 'async_trait>( &'life0 self, refresh_token: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<String>, Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Atomically claim-and-delete the refresh_token → session_id reverse-index. Cross-replica safe (Redis GETDEL / DynamoDB DeleteItem ReturnValues=ALL_OLD / fjall mutex). Exactly one concurrent caller observes Some for any given token. Used by /auth/refresh to close the rotation TOCTOU.

fn count_pending_challenges<'life0, 'life1, 'async_trait>( &'life0 self, did: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<usize, Self::Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Count ChallengeSent sessions for did. Backends with an O(1) per-DID tracker (did-hosting) override the default O(N) prefix-scan implementation by re-implementing this method.