Struct SessionState 

struct SessionState {
    phase: SessionPhase,
    bearer: Option<String>,
    expires_at: Option<Instant>,
    key_store: KeyStore<KeySlotIds>,
    organization_id: Option<OrganizationId>,
    phase_tx: Sender<SessionPhase>,
}

Fields

phase: SessionPhase

bearer: Option<String>

The last issued bearer, kept through renewals and cleared only on terminal entry.

expires_at: Option<Instant>

Monotonic expiry of bearer.

key_store: KeyStore<KeySlotIds>

Shared with the client, so clearing it on terminal entry reaches core too.

organization_id: Option<OrganizationId>

The organisation from the access token’s claim; None until the first authentication.

phase_tx: Sender<SessionPhase>

Implementations

impl SessionState

fn needs_renewal(&self) -> bool

Whether the stored bearer is within or past the proactive renewal margin.

fn active_bearer(&self) -> Result<String, SessionError>

The stored bearer for a session the caller has just seen valid, still under the same guard. Without a bearer this is the terminal error for the phase; any other phase is an invariant breach (an Active session always has a bearer).

fn set_phase(&mut self, phase: SessionPhase)

fn apply_success( &mut self, success: AuthSuccess, token: &AccessToken, ) -> Result<(), CryptoModuleError>

fn enter_terminal(&mut self, lost: SessionLost)

Enter a terminal phase, dropping the bearer and the org key.