Struct SessionManager 

pub(crate) struct SessionManager {
    state: Mutex<SessionState>,
    identity: IdentityClient,
    token: AccessToken,
}

Manages the connector session lifecycle. All mutable state sits behind one async Mutex, so at most one renewal is in flight. Debug is hand-written to avoid leaking the token or bearer.

Fields

state: Mutex<SessionState>

identity: IdentityClient

token: AccessToken

Implementations

impl SessionManager

pub(crate) async fn new( identity: IdentityClient, token: AccessToken, key_store: KeyStore<KeySlotIds>, ) -> Result<Arc<Self>, SessionError>

Build the manager and authenticate. A rejected credential returns Err(SessionError::Lost(Revoked)), which callers treat as a fatal startup failure. key_store is the client’s, which the org key is installed into.

pub(crate) async fn phase(&self) -> SessionPhase

pub(crate) async fn organization_id(&self) -> Option<OrganizationId>

None only before the first authentication, which Self::new has already performed.

pub(crate) async fn bearer( &self, deadline: Option<Instant>, ) -> Result<String, SessionError>

Obtain a valid bearer, renewing as needed. Retries transient errors with capped backoff up to deadline (NO_DEADLINE_MAX_TRIES caps a None deadline); a rejected credential clears secrets and returns Err(Lost(Revoked)).

pub(crate) async fn force_refresh( &self, stale: &str, deadline: Option<Instant>, ) -> Result<String, SessionError>

Force a session refresh on the 401 path. A bearer that no longer matches stale was already renewed concurrently and is returned as-is, as in bitwarden-auth’s resolve_retry.

pub(crate) async fn close(&self)

Transition to Closed, dropping the bearer and the org key.

async fn renew_with_backoff( &self, deadline: Option<Instant>, stale: Option<&str>, ) -> Result<String, SessionError>

Return the stored bearer if it is fresh and not stale, otherwise renew with backoff. The check runs under the same guard as the renewal, so concurrent callers coalesce onto one renewal and a concurrent close() cannot slip in between. The mutex is held across the identity call and released during the backoff sleep.

Trait Implementations

impl Debug for SessionManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.