Struct Session 

pub struct Session {
    pub token_hash: Vec<u8>,
    pub user_id: i64,
    pub created_at: i64,
    pub expires_at: i64,
}

A row in the sessions table, representing an active authenticated session.

Sessions are identified by an opaque token (a UUID) that the client stores locally. The server never stores the raw token — only its BLAKE3 hash. This means even if the database is compromised, an attacker cannot reconstruct the original tokens.

Session lifetime is 30 days from creation. Expired sessions are lazily revoked the next time the token is presented to the auth_guard middleware.

Fields

token_hash: Vec<u8>

user_id: i64

created_at: i64

expires_at: i64

Implementations

impl Session

pub async fn create(pool: &SqlitePool, user_id: i64) -> Result<String>

Creates a new entry in Sessions entity then returns a hashed token as String

Errors

• Fails with [sqlx::sqlite::SqliteQueryResult] if an error occurs interacting with sqlite database.
• Returns an error if system time is set earlier than UNIX_EPOCH.

pub async fn verify( pool: &SqlitePool, token_hash: &[u8], ) -> Result<Option<Self>>

Querries the database and returns Option<Session> wrapped in Result. If any such token exists yields Some(session)

Errors

Returns [sqlx::Error] on failed querry to database.

pub async fn revoke(pool: &SqlitePool, token_hash: &[u8]) -> Result<()>

Removes the session entry from sessions entity.

Errors

Fails with [sqlx::Error], if querrying with database fails

Trait Implementations

impl<'a, R: Row> FromRow<'a, R> for Session

where &'a str: ColumnIndex<R>, Vec<u8>: Decode<'a, R::Database> + Type<R::Database>, i64: Decode<'a, R::Database> + Type<R::Database>,

fn from_row(__row: &'a R) -> Result<Self>