Managing Sessions & Session Invalidating on its own.

[aarondyejr]

Hey again, sorry for making so many discussions. I have a couple question I want to ask and something to inquire more about.

1. What would be the best way to update a session (for example if someone changed information associated with said session)
2. Sessions are for some reason still invalidating themselves between restarts. I have monitored the issue, tried to track it down and I cannot seem to find where it is occurring at. I've thought maybe it was the store itself but I don't see any indications of that being the case, nor do I see any indications axum_login is at fault either. I am just lost on what to do. The cookie still exists, and the record still exists in the surrealdb database, yet axum_login returns 401 unauthorized when I access a protected route.
3. Is there anyway I can also accept passing in the cookie through an authorization header or would this require me making my own middleware to handle both cases?

[maxcountryman]

Can you explain what you mean by your first question: What specific situations are you concerned about?

For your second issue, please try to reproduce this problem using one of the examples within this repo. Once you have, please share it with us so we can take a look.

Finally, regarding your last question, please refer to this discussion: #214

[aarondyejr]

Here is how I instantiate the store and session: https://hastebin.skyra.pw/exofiwiqox.rust
This is how I handle impl Backend and AuthUser: https://hastebin.skyra.pw/azehoferun.rust

[maxcountryman]

Please fork this repo, modify one of the examples, and share the fork.

The goal is to help us reproduce what you think you're seeing, so we need to be able to run it directly ourselves.

[aarondyejr]

Here is the fork I made of the sqlite example that produces the same result as the one in my prod code. https://github.com/aarondyejr/axum-sqlite

[maxcountryman]

You are regenerating a key each time you start the server.

[aarondyejr]

Ah yknow what, that makes more sense looking back at it now. I should generate 1 single key and use it.

[aarondyejr]

Thank you so much max, sorry that seems like such a stupid issue ahaha.