Bind Serial Transports To Web Sessions

src/web_session_store.h

@@ -60,8 +60,15 @@ esp_err_t web_session_store_lookup(
  * authorization. Every successful lookup/check revalidates the principal.
  * No API result is a lease: recheck at later sensitive boundaries. */
 esp_err_t web_session_store_is_current(web_session_id_t id, bool *current);
+/* Also verifies that the transport's copied principal belongs to this ID. */
+esp_err_t web_session_store_check_principal(web_session_id_t id,
+                                           const user_principal_t *principal,
+                                           bool *current);
 void web_session_store_invalidate(web_session_id_t id);
 void web_session_store_invalidate_user(uint32_t user_id);
+/* Command notifications use names, including after account deletion. NULL/0
+ * invalidates all records without disabling the store. */
+void web_session_store_invalidate_username(const uint8_t *username, size_t length);
 void web_session_store_prune(void);
 
 /* Counts only: never token/digest/CSRF/principal material. Expired records are