session

type SessionManager ¶

type SessionManager interface {
	Create(ctx context.Context, identity auth.Identity) (auth.Session, error)
	Validate(ctx context.Context, token string) (auth.Session, error)
	Revoke(ctx context.Context, token string) error
}

SessionManager manages session lifecycle after authentication. Implementations decide how tokens are generated and where state is stored.

Strategy examples:

• Server-side session: crypto-random token stored in Redis.
• JWT: signed token with claims; Validate decodes without server state.
• Access+refresh: dual tokens with separate lifetimes.

func NewServerSessionManager(
	tracer observability.Tracer,
	meter observability.Meter,
	sessionRepo repokvstore.SessionRepository,
	ttl time.Duration,
) SessionManager