Struct actix_identity::CookieIdentityPolicy

source · [−]

pub struct CookieIdentityPolicy(_);

Expand description

Use cookies for request identity storage.

See this page on MDN for details on cookie attributes.

Examples

use actix_web::App;
use actix_identity::{CookieIdentityPolicy, IdentityService};

// create cookie identity backend
let policy = CookieIdentityPolicy::new(&[0; 32])
           .domain("www.rust-lang.org")
           .name("actix_auth")
           .path("/")
           .secure(true);

let app = App::new()
    // wrap policy into identity middleware
    .wrap(IdentityService::new(policy));

Implementations

source

impl CookieIdentityPolicy

source

pub fn new(key: &[u8]) -> CookieIdentityPolicy

Create new CookieIdentityPolicy instance.

Key argument is the private key for issued cookies. If this value is changed, all issued cookie identities are invalidated.

Panics

Panics if key is less than 32 bytes in length..

source

pub fn name(self, value: impl Into<String>) -> CookieIdentityPolicy

Sets the name of issued cookies.

source

pub fn path(self, value: impl Into<String>) -> CookieIdentityPolicy

Sets the Path attribute of issued cookies.

source

pub fn domain(self, value: impl Into<String>) -> CookieIdentityPolicy

Sets the Domain attribute of issued cookies.

source

pub fn secure(self, value: bool) -> CookieIdentityPolicy

Sets the Secure attribute of issued cookies.

source

pub fn max_age(self, value: Duration) -> CookieIdentityPolicy

Sets the Max-Age attribute of issued cookies.

source

pub fn max_age_secs(self, seconds: i64) -> CookieIdentityPolicy

Sets the Max-Age attribute of issued cookies with given number of seconds.

source

pub fn http_only(self, http_only: bool) -> Self

Sets the HttpOnly attribute of issued cookies.

By default, the HttpOnly attribute is omitted from issued cookies.

source

pub fn same_site(self, same_site: SameSite) -> Self

Sets the SameSite attribute of issued cookies.

By default, the SameSite attribute is omitted from issued cookies.

source

pub fn visit_deadline(self, deadline: Duration) -> CookieIdentityPolicy

Accepts only users who have visited within given deadline.

In other words, invalidate a login after some amount of inactivity. Using this feature causes updated cookies to be issued on each response in order to record the user’s last visitation timestamp.

By default, visit deadline is disabled.

source

pub fn login_deadline(self, deadline: Duration) -> CookieIdentityPolicy

Accepts only users who authenticated within the given deadline.

In other words, invalidate a login after some amount of time, regardless of activity. While Max-Age is useful in constraining the cookie lifetime, it could be extended manually; using this feature encodes the deadline directly into the issued cookies, making it immutable to users.

By default, login deadline is disabled.