Default module for credentials session storage.

A key (session id) is used to store, fetch, or delete credentials. The credentials are expected to take the form of {credentials, session_metadata}, where session metadata is data exclusive to the session id.

This module also adds two utility functions:

• users/2 - to list all current users
• sessions/2 - to list all current sessions

The :ttl should be maximum 30 minutes per OWASP recommendations. A warning will be output for any sessions created with a longer TTL.

Custom credentials cache module

Pow may use the utility functions in this module. To ensure all required functions has been implemented in a custom credentials cache module, the @behaviour of this module should be used:

defmodule MyApp.CredentialsStore do
  use Pow.Store.Base,
    ttl: :timer.minutes(30),
    namespace: "credentials"

  @behaviour Pow.Store.CredentialsCache

  @impl Pow.Store.CredentialsCache
  def users(config, struct) do
    # ...
  end

  @impl Pow.Store.CredentialsCache
  def put(config, key, value) do
    # ...
  end
end

Configuration options

• :reload - boolean value for whether the user object should be loaded from the context. Defaults false.