Skip to main content

validate_session_id

subcog::hooks::session_start

Function validate_session_id 

Source 
pub fn validate_session_id(session_id: &str) -> SessionIdValidation
Expand description

Validates a session ID for sufficient entropy.

§Security

This function checks session IDs for:

  • Minimum length (16 characters) to prevent enumeration
  • Maximum length (256 characters) to prevent DoS
  • Sufficient unique characters to prevent predictable patterns
  • Detection of repeating/sequential patterns

§Returns

A SessionIdValidation enum indicating the validation result.