Struct SessionMiddleware

pub struct SessionMiddleware { /* private fields */ }

Available on crate feature session only.

A middleware for session management in Actix Web applications.

SessionMiddleware takes care of a few jobs:

• Instructs the session storage backend to create/update/delete/retrieve the state attached to a session according to its status and the operations that have been performed against it;
• Set/remove a cookie, on the client side, to enable a user to be consistently associated with the same session across multiple HTTP requests.

Use SessionMiddleware::new to initialize the session framework using the default parameters. To create a new instance of SessionMiddleware you need to provide:

• an instance of the session storage backend you wish to use (i.e. an implementation of SessionStore);
• a secret key, to sign or encrypt the content of client-side session cookie.

How did we choose defaults?

You should not regret adding actix-session to your dependencies and going to production using the default configuration. That is why, when in doubt, we opt to use the most secure option for each configuration parameter.

We expose knobs to change the default to suit your needs—i.e., if you know what you are doing, we will not stop you. But being a subject-matter expert should not be a requirement to deploy reasonably secure implementation of sessions.

Implementations

impl SessionMiddleware

pub fn new(client: Arc<dyn MemoryDB>, key: Key) -> Self

Use SessionMiddleware::new to initialize the session framework using the default parameters.

To create a new instance of SessionMiddleware you need to provide:

• an instance of the session storage backend you wish to use (i.e. an implementation of SessionStore);
• a secret key, to sign or encrypt the content of client-side session cookie.

pub fn builder(client: Arc<dyn MemoryDB>, key: Key) -> SessionMiddlewareBuilder

A fluent API to configure SessionMiddleware.

It takes as input the two required inputs to create a new instance of SessionMiddleware:

• an instance of the session storage backend you wish to use (i.e. an implementation of SessionStore);
• a secret key, to sign or encrypt the content of client-side session cookie.

Trait Implementations

impl Clone for SessionMiddleware

fn clone(&self) -> SessionMiddleware

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S, B> Transform<S, ServiceRequest> for SessionMiddleware

where S: Service<ServiceRequest, Response = ServiceResponse<B>, Error = Error> + 'static, S::Future: 'static, B: MessageBody + 'static,

type Response = ServiceResponse<B>

Responses produced by the service.

type Error = Error

Errors produced by the service.

type Transform = InnerSessionMiddleware<S>

The TransformService value created by this factory

type InitError = ()

Errors produced while building a transform service.

type Future = Ready<Result<<SessionMiddleware as Transform<S, ServiceRequest>>::Transform, <SessionMiddleware as Transform<S, ServiceRequest>>::InitError>>

The future response value.

fn new_transform(&self, service: S) -> Self::Future

Creates and returns a new Transform component, asynchronously