Sessions

use kit::session::{session, session_mut};

// Read session data
if let Some(session) = session() {
    // Get a value
    if let Some(user_id) = session.get::<i64>("user_id") {
        println!("User ID: {}", user_id);
    }

    // Check if key exists
    if session.has("cart") {
        // ...
    }
}

// Write session data
if let Some(mut session) = session_mut() {
    // Set a value
    session.put("locale", "en");

    // Remove a value
    session.forget("temp_data");

    // Flash data (available only for next request)
    session.flash("message", "Welcome back!");
}

use kit::session::session;

if let Some(session) = session() {
    // Get a typed value
    let count: Option<i32> = session.get("view_count");

    // Get with default
    let theme = session.get::<String>("theme").unwrap_or("light".to_string());

    // Check existence
    if session.has("user_id") {
        // User is logged in
    }
}

use kit::session::session_mut;

if let Some(mut session) = session_mut() {
    // Store a value
    session.put("user_id", 123i64);
    session.put("username", "john");

    // Store complex types (must be serializable)
    session.put("preferences", serde_json::json!({
        "theme": "dark",
        "notifications": true
    }));

    // Remove a value
    session.forget("temp_key");
}

use kit::session::session_mut;

// In your controller action
if let Some(mut session) = session_mut() {
    session.flash("success", "Your profile has been updated!");
}

// Redirect to another page
redirect!("/profile")

// On the next request, the flash data is automatically available
if let Some(session) = session() {
    if let Some(success) = session.get::<String>("success") {
        // Display success message
    }
}

# Session lifetime in minutes (default: 120)
SESSION_LIFETIME=120

# Cookie name (default: kit_session)
SESSION_COOKIE=kit_session

# Enable secure cookies (requires HTTPS, default: false)
SESSION_SECURE=false

# Cookie path (default: /)
SESSION_PATH=/

# SameSite policy: Lax, Strict, or None (default: Lax)
SESSION_SAME_SITE=Lax

use kit::{Router, SessionMiddleware, CsrfMiddleware};
use kit::session::{SessionConfig, DatabaseSessionDriver};

pub fn boot(router: Router) -> Router {
    // Initialize session store
    let session_config = SessionConfig::from_env();
    let session_store = DatabaseSessionDriver::new();

    router
        // Session middleware (must come before CSRF)
        .middleware(SessionMiddleware::new(session_store, session_config))
        // CSRF protection (requires session)
        .middleware(CsrfMiddleware::new())
}

CREATE TABLE sessions (
    id VARCHAR(40) PRIMARY KEY,
    user_id BIGINT NULL,
    payload TEXT NOT NULL,
    csrf_token VARCHAR(80) NOT NULL,
    last_activity TIMESTAMP NOT NULL
);

CREATE INDEX sessions_user_id_index ON sessions(user_id);
CREATE INDEX sessions_last_activity_index ON sessions(last_activity);

use kit::{Auth, session::session};

// The Auth facade uses sessions internally
Auth::login(user_id);  // Stores user_id in session

// You can access the user_id directly if needed
if let Some(session) = session() {
    let user_id = session.user_id();  // Returns Option<i64>
}

// Safe to call from anywhere in your request handling code
if let Some(session) = session() {
    // This session is isolated to the current request
}