itsi 0.1.19 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +8 -0
- data/Cargo.lock +942 -242
- data/LICENSE.txt +698 -0
- data/README.md +77 -54
- data/Rakefile +9 -5
- data/crates/itsi_acme/.gitignore +4 -0
- data/crates/itsi_acme/Cargo.toml +86 -0
- data/crates/itsi_acme/LICENSE-APACHE +201 -0
- data/crates/itsi_acme/LICENSE-MIT +23 -0
- data/crates/itsi_acme/README.md +9 -0
- data/crates/itsi_acme/examples/high_level.rs +63 -0
- data/crates/itsi_acme/examples/high_level_warp.rs +52 -0
- data/crates/itsi_acme/examples/low_level.rs +87 -0
- data/crates/itsi_acme/examples/low_level_axum.rs +66 -0
- data/crates/itsi_acme/src/acceptor.rs +81 -0
- data/crates/itsi_acme/src/acme.rs +354 -0
- data/crates/itsi_acme/src/axum.rs +86 -0
- data/crates/itsi_acme/src/cache.rs +39 -0
- data/crates/itsi_acme/src/caches/boxed.rs +80 -0
- data/crates/itsi_acme/src/caches/composite.rs +69 -0
- data/crates/itsi_acme/src/caches/dir.rs +106 -0
- data/crates/itsi_acme/src/caches/mod.rs +11 -0
- data/crates/itsi_acme/src/caches/no.rs +78 -0
- data/crates/itsi_acme/src/caches/test.rs +136 -0
- data/crates/itsi_acme/src/config.rs +172 -0
- data/crates/itsi_acme/src/https_helper.rs +69 -0
- data/crates/itsi_acme/src/incoming.rs +142 -0
- data/crates/itsi_acme/src/jose.rs +161 -0
- data/crates/itsi_acme/src/lib.rs +142 -0
- data/crates/itsi_acme/src/resolver.rs +59 -0
- data/crates/itsi_acme/src/state.rs +424 -0
- data/crates/itsi_rb_helpers/src/lib.rs +4 -3
- data/crates/itsi_scheduler/Cargo.toml +1 -1
- data/crates/itsi_scheduler/src/itsi_scheduler.rs +8 -2
- data/crates/itsi_scheduler/src/lib.rs +1 -0
- data/crates/itsi_server/Cargo.toml +3 -3
- data/crates/itsi_server/src/lib.rs +2 -1
- data/crates/itsi_server/src/ruby_types/itsi_http_request.rs +20 -3
- data/crates/itsi_server/src/ruby_types/itsi_server/file_watcher.rs +11 -3
- data/crates/itsi_server/src/ruby_types/itsi_server/itsi_server_config.rs +255 -65
- data/crates/itsi_server/src/ruby_types/itsi_server.rs +3 -0
- data/crates/itsi_server/src/server/binds/bind.rs +3 -0
- data/crates/itsi_server/src/server/binds/listener.rs +44 -32
- data/crates/itsi_server/src/server/binds/tls/locked_dir_cache.rs +2 -2
- data/crates/itsi_server/src/server/binds/tls.rs +14 -6
- data/crates/itsi_server/src/server/middleware_stack/middleware.rs +33 -28
- data/crates/itsi_server/src/server/middleware_stack/middlewares/allow_list.rs +12 -5
- data/crates/itsi_server/src/server/middleware_stack/middlewares/auth_api_key.rs +8 -1
- data/crates/itsi_server/src/server/middleware_stack/middlewares/auth_basic.rs +9 -1
- data/crates/itsi_server/src/server/middleware_stack/middlewares/auth_jwt.rs +95 -37
- data/crates/itsi_server/src/server/middleware_stack/middlewares/cache_control.rs +11 -2
- data/crates/itsi_server/src/server/middleware_stack/middlewares/compression.rs +39 -12
- data/crates/itsi_server/src/server/middleware_stack/middlewares/cors.rs +36 -27
- data/crates/itsi_server/src/server/middleware_stack/middlewares/csp.rs +193 -0
- data/crates/itsi_server/src/server/middleware_stack/middlewares/deny_list.rs +12 -3
- data/crates/itsi_server/src/server/middleware_stack/middlewares/error_response/default_responses.rs +74 -72
- data/crates/itsi_server/src/server/middleware_stack/middlewares/error_response.rs +15 -1
- data/crates/itsi_server/src/server/middleware_stack/middlewares/etag.rs +11 -8
- data/crates/itsi_server/src/server/middleware_stack/middlewares/intrusion_protection.rs +19 -11
- data/crates/itsi_server/src/server/middleware_stack/middlewares/log_requests.rs +5 -5
- data/crates/itsi_server/src/server/middleware_stack/middlewares/max_body.rs +2 -2
- data/crates/itsi_server/src/server/middleware_stack/middlewares/mod.rs +31 -2
- data/crates/itsi_server/src/server/middleware_stack/middlewares/proxy.rs +17 -20
- data/crates/itsi_server/src/server/middleware_stack/middlewares/rate_limit.rs +19 -8
- data/crates/itsi_server/src/server/middleware_stack/middlewares/redirect.rs +16 -37
- data/crates/itsi_server/src/server/middleware_stack/middlewares/request_headers.rs +22 -12
- data/crates/itsi_server/src/server/middleware_stack/middlewares/response_headers.rs +26 -11
- data/crates/itsi_server/src/server/middleware_stack/middlewares/ruby_app.rs +3 -3
- data/crates/itsi_server/src/server/middleware_stack/middlewares/static_assets.rs +9 -2
- data/crates/itsi_server/src/server/middleware_stack/middlewares/string_rewrite.rs +14 -4
- data/crates/itsi_server/src/server/middleware_stack/middlewares/token_source.rs +19 -0
- data/crates/itsi_server/src/server/middleware_stack/mod.rs +69 -35
- data/crates/itsi_server/src/server/mod.rs +1 -0
- data/crates/itsi_server/src/server/redirect_type.rs +26 -0
- data/crates/itsi_server/src/server/serve_strategy/cluster_mode.rs +30 -18
- data/crates/itsi_server/src/server/serve_strategy/single_mode.rs +77 -17
- data/crates/itsi_server/src/server/signal.rs +1 -0
- data/crates/itsi_server/src/server/size_limited_incoming.rs +6 -0
- data/crates/itsi_server/src/server/thread_worker.rs +6 -2
- data/crates/itsi_server/src/services/itsi_http_service.rs +20 -2
- data/crates/itsi_server/src/services/rate_limiter.rs +15 -4
- data/crates/itsi_server/src/services/static_file_server.rs +63 -47
- data/crates/itsi_tracing/src/lib.rs +80 -29
- data/docker/Dockerfile +12 -0
- data/docs/content/_index.md +17 -10
- data/docs/content/acknowledgements/_index.md +46 -0
- data/docs/content/configuration/_index.md +101 -0
- data/docs/content/contact/_index.md +14 -0
- data/docs/content/faqs/_index.md +29 -0
- data/docs/content/features/_index.md +291 -0
- data/docs/content/getting_started/_index.md +73 -0
- data/docs/content/getting_started/local_development.md +100 -0
- data/docs/content/getting_started/logging.md +23 -0
- data/docs/content/getting_started/running_itsi_in_production.md +26 -0
- data/docs/content/getting_started/signals.md +38 -0
- data/docs/content/itsi-server-100.png +0 -0
- data/docs/content/itsi_scheduler/_index.md +106 -0
- data/docs/content/itsi_scheduler/itsi-scheduler-100.png +0 -0
- data/docs/content/ruby-lsp.png +0 -0
- data/docs/content/ruby.svg +948 -0
- data/docs/content/utilities/_index.md +13 -0
- data/docs/content/utilities/config_file_testing.md +17 -0
- data/docs/content/utilities/passfile_generator.md +41 -0
- data/docs/content/utilities/route_testing.md +27 -0
- data/docs/content/utilities/secrets_management.md +30 -0
- data/docs/data/icons.yaml +949 -0
- data/docs/hugo.yaml +27 -28
- data/fairytale.txt +33 -0
- data/gems/scheduler/Cargo.lock +47 -47
- data/gems/scheduler/README.md +52 -24
- data/gems/scheduler/Rakefile +0 -4
- data/gems/scheduler/itsi-scheduler-100.png +0 -0
- data/gems/scheduler/lib/itsi/scheduler/version.rb +1 -1
- data/gems/scheduler/lib/itsi/scheduler.rb +9 -4
- data/gems/scheduler/test/test_active_record.rb +12 -7
- data/gems/server/Cargo.lock +950 -239
- data/gems/server/README.md +2 -0
- data/gems/server/Rakefile +0 -4
- data/gems/server/exe/itsi +16 -5
- data/gems/server/lib/itsi/http_request/response_status_shortcodes.rb +2 -0
- data/gems/server/lib/itsi/http_request.rb +40 -9
- data/gems/server/lib/itsi/http_response.rb +2 -1
- data/gems/server/lib/itsi/passfile.rb +0 -1
- data/gems/server/lib/itsi/server/config/config_helpers.rb +105 -0
- data/gems/server/lib/itsi/server/config/dsl.rb +44 -411
- data/gems/server/lib/itsi/server/config/known_paths/KitchensinkDirectories.txt +2346 -0
- data/gems/server/lib/itsi/server/config/known_paths/Randomfiles.txt +24 -0
- data/gems/server/lib/itsi/server/config/known_paths/UnixDotfiles.txt +52 -0
- data/gems/server/lib/itsi/server/config/known_paths/backdoors/ASP_CommonBackdoors.txt +29 -0
- data/gems/server/lib/itsi/server/config/known_paths/backdoors/bot_control_panels.txt +1668 -0
- data/gems/server/lib/itsi/server/config/known_paths/backdoors/shells.txt +1167 -0
- data/gems/server/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST.txt +7 -0
- data/gems/server/lib/itsi/server/config/known_paths/cgi/CGI_HTTP_POST_Windows.txt +6 -0
- data/gems/server/lib/itsi/server/config/known_paths/cgi/CGI_Microsoft.txt +79 -0
- data/gems/server/lib/itsi/server/config/known_paths/cgi/CGI_XPlatform.txt +3948 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/README.md +5 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/drupal_plugins.txt +6320 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/drupal_themes.txt +828 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/joomla_plugins.txt +224 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/joomla_themes.txt +30 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/php-nuke.txt +2142 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wordpress.txt +1566 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_common_theme_files.txt +46 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_plugins.txt +13366 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_plugins_full.txt +68662 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_plugins_top225.txt +225 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_themes.readme +12 -0
- data/gems/server/lib/itsi/server/config/known_paths/cms/wp_themes.txt +7336 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/3CharExtBrute.txt +17576 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/CommonWebExtensions.txt +80 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Backup.txt +14 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Common.txt +865 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Compressed.txt +186 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Mostcommon.txt +30 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/Extensions.Skipfish.txt +93 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/WordlistSkipfish.txt +1918 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/copy_of.txt +8 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories-lowercase.txt +56180 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-directories.txt +62290 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions-lowercase.txt +2367 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-extensions.txt +2450 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files-lowercase.txt +35323 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-files.txt +37037 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words-lowercase.txt +107982 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-large-words.txt +119600 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories-lowercase.txt +26593 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-directories.txt +30009 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions-lowercase.txt +1233 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-extensions.txt +1289 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files-lowercase.txt +16243 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-files.txt +17128 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words-lowercase.txt +56293 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-medium-words.txt +63087 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories-lowercase.txt +17776 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-directories.txt +20122 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions-lowercase.txt +914 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-extensions.txt +963 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files-lowercase.txt +10848 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-files.txt +11424 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words-lowercase.txt +38267 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/raft-small-words.txt +43003 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/spanish.txt +445 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/test_demo.txt +36 -0
- data/gems/server/lib/itsi/server/config/known_paths/filename-dirname-bruteforce/upload_variants.txt +44 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/Logins.txt +71 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/cfm.txt +294 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/html.txt +295 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/jsp.txt +294 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/php.txt +294 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/windows-asp.txt +294 -0
- data/gems/server/lib/itsi/server/config/known_paths/login-file-locations/windows-aspx.txt +294 -0
- data/gems/server/lib/itsi/server/config/known_paths/password-file-locations/Passwords.txt +47 -0
- data/gems/server/lib/itsi/server/config/known_paths/php/PHP.txt +30 -0
- data/gems/server/lib/itsi/server/config/known_paths/php/PHP_CommonBackdoors.txt +5 -0
- data/gems/server/lib/itsi/server/config/known_paths/proxy-conf.txt +31 -0
- data/gems/server/lib/itsi/server/config/known_paths/tftp.txt +79 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/ADFS.txt +86 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/AdobeXML.txt +16 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Apache.txt +101 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/ApacheTomcat.txt +47 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Apache_Axis.txt +16 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/ColdFusion.txt +111 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/FatwireCMS.txt +390 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Frontpage.txt +38 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/HP_System_Mgmt_Homepage.txt +239 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/HTTP_POST_Microsoft.txt +2 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Hyperion.txt +578 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/IIS.txt +187 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/JBoss.txt +5 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/JRun.txt +13 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/JavaServlets_Common.txt +3 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Joomla_exploitable.txt +1937 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/LotusNotes.txt +206 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Netware.txt +18 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Oracle9i.txt +60 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/OracleAppServer.txt +192 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/README.md +6 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Ruby_Rails.txt +121 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/SAP.txt +463 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Sharepoint.txt +1707 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/SiteMinder.txt +19 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/SunAppServerGlassfish.txt +51 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/SuniPlanet.txt +35 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Vignette.txt +73 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Weblogic.txt +160 -0
- data/gems/server/lib/itsi/server/config/known_paths/webservers-appservers/Websphere.txt +366 -0
- data/gems/server/lib/itsi/server/config/known_paths/wellknown-rfc5785.txt +30 -0
- data/gems/server/lib/itsi/server/config/known_paths.rb +20 -0
- data/gems/server/lib/itsi/server/config/middleware/_index.md +56 -0
- data/gems/server/lib/itsi/server/config/middleware/allow_list.md +46 -0
- data/gems/server/lib/itsi/server/config/middleware/allow_list.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_api_key.md +90 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_api_key.rb +51 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_basic.md +45 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_basic.rb +44 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_jwt.md +82 -0
- data/gems/server/lib/itsi/server/config/middleware/auth_jwt.rb +38 -0
- data/gems/server/lib/itsi/server/config/middleware/cache_control.md +78 -0
- data/gems/server/lib/itsi/server/config/middleware/cache_control.rb +45 -0
- data/gems/server/lib/itsi/server/config/middleware/cidr_to_regex.rb +50 -0
- data/gems/server/lib/itsi/server/config/middleware/compression.md +50 -0
- data/gems/server/lib/itsi/server/config/middleware/compression.rb +37 -0
- data/gems/server/lib/itsi/server/config/middleware/cors.md +93 -0
- data/gems/server/lib/itsi/server/config/middleware/cors.rb +32 -0
- data/gems/server/lib/itsi/server/config/middleware/csp.md +37 -0
- data/gems/server/lib/itsi/server/config/middleware/csp.rb +44 -0
- data/gems/server/lib/itsi/server/config/middleware/deny_list.md +45 -0
- data/gems/server/lib/itsi/server/config/middleware/deny_list.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/_index.md +159 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/controller.md +186 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/controller.rb +33 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/delete.md +12 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/delete.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/endpoint.rb +99 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/get.md +12 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/get.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/http_request.md +44 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/http_response.md +39 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/patch.md +12 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/patch.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/post.md +12 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/post.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/put.md +12 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/put.rb +42 -0
- data/gems/server/lib/itsi/server/config/middleware/endpoint/schemas.md +122 -0
- data/gems/server/lib/itsi/server/config/middleware/error_response.md +61 -0
- data/gems/server/lib/itsi/server/config/middleware/error_response.rb +36 -0
- data/gems/server/lib/itsi/server/config/middleware/etag.md +59 -0
- data/gems/server/lib/itsi/server/config/middleware/etag.rb +27 -0
- data/gems/server/lib/itsi/server/config/middleware/grpc.md +172 -0
- data/gems/server/lib/itsi/server/config/middleware/grpc.rb +54 -0
- data/gems/server/lib/itsi/server/config/middleware/intrusion_protection.md +124 -0
- data/gems/server/lib/itsi/server/config/middleware/intrusion_protection.rb +61 -0
- data/gems/server/lib/itsi/server/config/middleware/location.md +107 -0
- data/gems/server/lib/itsi/server/config/middleware/location.rb +99 -0
- data/gems/server/lib/itsi/server/config/middleware/log_requests.md +65 -0
- data/gems/server/lib/itsi/server/config/middleware/log_requests.rb +31 -0
- data/gems/server/lib/itsi/server/config/middleware/max_body.md +18 -0
- data/gems/server/lib/itsi/server/config/middleware/max_body.rb +21 -0
- data/gems/server/lib/itsi/server/config/middleware/proxy.md +62 -0
- data/gems/server/lib/itsi/server/config/middleware/proxy.rb +41 -0
- data/gems/server/lib/itsi/server/config/middleware/rackup_file.md +54 -0
- data/gems/server/lib/itsi/server/config/middleware/rackup_file.rb +44 -0
- data/gems/server/lib/itsi/server/config/middleware/rate_limit.md +126 -0
- data/gems/server/lib/itsi/server/config/middleware/rate_limit.rb +34 -0
- data/gems/server/lib/itsi/server/config/middleware/rate_limit_store.rb +25 -0
- data/gems/server/lib/itsi/server/config/middleware/redirect.md +55 -0
- data/gems/server/lib/itsi/server/config/middleware/redirect.rb +25 -0
- data/gems/server/lib/itsi/server/config/middleware/request_headers.md +34 -0
- data/gems/server/lib/itsi/server/config/middleware/request_headers.rb +24 -0
- data/gems/server/lib/itsi/server/config/middleware/response_headers.md +33 -0
- data/gems/server/lib/itsi/server/config/middleware/response_headers.rb +25 -0
- data/gems/server/lib/itsi/server/config/middleware/run.md +60 -0
- data/gems/server/lib/itsi/server/config/middleware/run.rb +43 -0
- data/gems/server/lib/itsi/server/config/middleware/static_assets.md +73 -0
- data/gems/server/lib/itsi/server/config/middleware/static_assets.rb +87 -0
- data/gems/server/lib/itsi/server/config/middleware/static_response.md +44 -0
- data/gems/server/lib/itsi/server/config/middleware/static_response.rb +29 -0
- data/gems/server/lib/itsi/server/config/middleware/string_rewrite.md +67 -0
- data/gems/server/lib/itsi/server/config/middleware/token_source.rb +32 -0
- data/gems/server/lib/itsi/server/config/middleware.rb +13 -0
- data/gems/server/lib/itsi/server/config/option.rb +14 -0
- data/gems/server/lib/itsi/server/config/options/_index.md +37 -0
- data/gems/server/lib/itsi/server/config/options/auto_reload_config.md +13 -0
- data/gems/server/lib/itsi/server/config/options/auto_reload_config.rb +41 -0
- data/gems/server/lib/itsi/server/config/options/bind.md +71 -0
- data/gems/server/lib/itsi/server/config/options/bind.rb +26 -0
- data/gems/server/lib/itsi/server/config/options/certificates.md +65 -0
- data/gems/server/lib/itsi/server/config/options/daemonize.md +14 -0
- data/gems/server/lib/itsi/server/config/options/daemonize.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/fiber_scheduler.md +34 -0
- data/gems/server/lib/itsi/server/config/options/fiber_scheduler.rb +21 -0
- data/gems/server/lib/itsi/server/config/options/header_read_timeout.md +17 -0
- data/gems/server/lib/itsi/server/config/options/header_read_timeout.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/hooks/_index.md +11 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_fork.md +13 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_fork.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_memory_limit_reached.md +14 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_memory_limit_reached.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_start.md +12 -0
- data/gems/server/lib/itsi/server/config/options/hooks/after_start.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_fork.md +13 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_fork.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_restart.md +12 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_restart.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_shutdown.md +12 -0
- data/gems/server/lib/itsi/server/config/options/hooks/before_shutdown.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/include.md +20 -0
- data/gems/server/lib/itsi/server/config/options/include.rb +36 -0
- data/gems/server/lib/itsi/server/config/options/listen_backlog.md +11 -0
- data/gems/server/lib/itsi/server/config/options/listen_backlog.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/log_format.md +18 -0
- data/gems/server/lib/itsi/server/config/options/log_format.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/log_level.md +34 -0
- data/gems/server/lib/itsi/server/config/options/log_level.rb +20 -0
- data/gems/server/lib/itsi/server/config/options/log_target.md +38 -0
- data/gems/server/lib/itsi/server/config/options/log_target.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/log_target_filters.md +17 -0
- data/gems/server/lib/itsi/server/config/options/log_target_filters.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/multithreaded_reactor.md +27 -0
- data/gems/server/lib/itsi/server/config/options/multithreaded_reactor.rb +24 -0
- data/gems/server/lib/itsi/server/config/options/nodelay.md +16 -0
- data/gems/server/lib/itsi/server/config/options/nodelay.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/oob_gc_responses_threshold.md +19 -0
- data/gems/server/lib/itsi/server/config/options/oob_gc_responses_threshold.rb +18 -0
- data/gems/server/lib/itsi/server/config/options/pin_worker_cores.md +17 -0
- data/gems/server/lib/itsi/server/config/options/pin_worker_cores.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/preload.md +21 -0
- data/gems/server/lib/itsi/server/config/options/preload.rb +18 -0
- data/gems/server/lib/itsi/server/config/options/recv_buffer_size.md +15 -0
- data/gems/server/lib/itsi/server/config/options/recv_buffer_size.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/redirect_http_to_https.md +21 -0
- data/gems/server/lib/itsi/server/config/options/redirect_http_to_https.rb +30 -0
- data/gems/server/lib/itsi/server/config/options/request_timeout.md +23 -0
- data/gems/server/lib/itsi/server/config/options/request_timeout.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/reuse_address.md +16 -0
- data/gems/server/lib/itsi/server/config/options/reuse_address.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/reuse_port.md +16 -0
- data/gems/server/lib/itsi/server/config/options/reuse_port.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/scheduler_threads.md +34 -0
- data/gems/server/lib/itsi/server/config/options/scheduler_threads.rb +17 -0
- data/gems/server/lib/itsi/server/config/options/shutdown_timeout.md +17 -0
- data/gems/server/lib/itsi/server/config/options/shutdown_timeout.rb +19 -0
- data/gems/server/lib/itsi/server/config/options/stream_body.md +32 -0
- data/gems/server/lib/itsi/server/config/options/stream_body.rb +18 -0
- data/gems/server/lib/itsi/server/config/options/threads.md +44 -0
- data/gems/server/lib/itsi/server/config/options/threads.rb +17 -0
- data/gems/server/lib/itsi/server/config/options/watch.md +16 -0
- data/gems/server/lib/itsi/server/config/options/watch.rb +28 -0
- data/gems/server/lib/itsi/server/config/options/worker_memory_limit.md +22 -0
- data/gems/server/lib/itsi/server/config/options/worker_memory_limit.rb +18 -0
- data/gems/server/lib/itsi/server/config/options/workers.md +42 -0
- data/gems/server/lib/itsi/server/config/options/workers.rb +17 -0
- data/gems/server/lib/itsi/server/config/typed_struct.rb +242 -0
- data/gems/server/lib/itsi/server/config.rb +134 -11
- data/gems/server/lib/itsi/server/default_config/Itsi.rb +3 -3
- data/gems/server/lib/itsi/server/grpc/grpc_call.rb +1 -1
- data/gems/server/lib/itsi/server/grpc/grpc_interface.rb +11 -4
- data/gems/server/lib/itsi/server/rack/handler/itsi.rb +3 -3
- data/gems/server/lib/itsi/server/route_tester.rb +58 -8
- data/gems/server/lib/itsi/server/signal_trap.rb +5 -1
- data/gems/server/lib/itsi/server/typed_handlers/param_parser.rb +14 -18
- data/gems/server/lib/itsi/server/typed_handlers/source_parser.rb +6 -5
- data/gems/server/lib/itsi/server/typed_handlers.rb +12 -4
- data/gems/server/lib/itsi/server/version.rb +1 -1
- data/gems/server/lib/itsi/server.rb +122 -17
- data/gems/server/lib/ruby_lsp/itsi/addon.rb +66 -48
- data/gems/server/test/helpers/test_helper.rb +130 -11
- data/gems/server/test/middleware/allow_list.rb +128 -0
- data/gems/server/test/middleware/auth_api_key.rb +141 -0
- data/gems/server/test/middleware/auth_basic.rb +91 -0
- data/gems/server/test/middleware/auth_jwt.rb +214 -0
- data/gems/server/test/middleware/cache_control.rb +82 -0
- data/gems/server/test/middleware/cidr_to_regex.rb +46 -0
- data/gems/server/test/middleware/compression.rb +89 -0
- data/gems/server/test/middleware/cors.rb +113 -0
- data/gems/server/test/middleware/csp.rb +62 -0
- data/gems/server/test/middleware/deny_list.rb +131 -0
- data/gems/server/test/middleware/endpoint.rb +300 -0
- data/gems/server/test/middleware/etag.rb +75 -0
- data/gems/server/test/middleware/grpc/grpc.rb +158 -0
- data/gems/server/test/middleware/grpc/test_service.proto +32 -0
- data/gems/server/test/middleware/grpc/test_service_impl.rb +28 -0
- data/gems/server/test/middleware/grpc/test_service_pb.rb +18 -0
- data/gems/server/test/middleware/grpc/test_service_services_pb.rb +30 -0
- data/gems/server/test/middleware/header_interpolation.rb +35 -0
- data/gems/server/test/middleware/intrusion_protection.rb +259 -0
- data/gems/server/test/middleware/location.rb +220 -0
- data/gems/server/test/middleware/max_body.rb +20 -0
- data/gems/server/test/middleware/proxy.rb +415 -0
- data/gems/server/test/middleware/rate_limit.rb +211 -0
- data/gems/server/test/middleware/redirect.rb +85 -0
- data/gems/server/test/middleware/request_headers.rb +50 -0
- data/gems/server/test/middleware/response_headers.rb +50 -0
- data/gems/server/test/middleware/static_assets.rb +374 -0
- data/gems/server/test/middleware/static_response.rb +56 -0
- data/gems/server/test/middleware/string_rewrite.rb +112 -0
- data/gems/server/test/middleware/test_log_requests.rb +17 -0
- data/gems/server/test/options/bind.rb +47 -0
- data/gems/server/test/options/header_read_timeout.rb +23 -0
- data/gems/server/test/options/test_request_timeout.rb +16 -0
- data/gems/server/test/options/test_threads.rb +15 -0
- data/gems/server/test/options/test_workers.rb +16 -0
- data/gems/server/test/{test_itsi_server.rb → rack/test_rack_server.rb} +82 -95
- data/grpc_test/Itsi.rb +11 -0
- data/grpc_test/echo.proto +14 -0
- data/grpc_test/echo_pb.rb +16 -0
- data/grpc_test/echo_service_impl.rb +8 -0
- data/{sandbox/itsi_file/echo_service_nonitsi → grpc_test}/echo_services_pb.rb +0 -7
- data/itsi-scheduler-100.png +0 -0
- data/itsi-server-100.png +0 -0
- data/lib/itsi/version.rb +1 -1
- data/tasks.txt +17 -66
- metadata +352 -217
- data/crates/_index.md +0 -0
- data/crates/itsi_server/src/ruby_types/README.md +0 -21
- data/crates/itsi_server/test.md +0 -14
- data/docs/Itsi.rb +0 -17
- data/docs/content/about.md +0 -6
- data/docs/content/docs/_index.md +0 -18
- data/docs/content/docs/first-page.md +0 -9
- data/docs/content/docs/folder/_index.md +0 -10
- data/docs/content/docs/folder/leaf.md +0 -7
- data/foo/Itsi.rb +0 -122
- data/gems/_index.md +0 -18
- data/gems/scheduler/CHANGELOG.md +0 -5
- data/gems/scheduler/CODE_OF_CONDUCT.md +0 -139
- data/gems/scheduler/LICENSE.txt +0 -21
- data/gems/scheduler/_index.md +0 -7
- data/gems/server/CHANGELOG.md +0 -10
- data/gems/server/CODE_OF_CONDUCT.md +0 -139
- data/gems/server/LICENSE.txt +0 -21
- data/gems/server/_index.md +0 -6
- data/gems/server/lib/itsi/server/default_config/Itsi-rackup.rb +0 -119
- data/sandbox/README.md +0 -5
- data/sandbox/deploy/main.tf +0 -238
- data/sandbox/deploy/outputs.tf +0 -4
- data/sandbox/deploy/vars.tf +0 -11
- data/sandbox/falcon_benchmark/Gemfile +0 -10
- data/sandbox/falcon_benchmark/Gemfile.lock +0 -140
- data/sandbox/falcon_benchmark/config.ru +0 -54
- data/sandbox/itsi_file/Gemfile +0 -13
- data/sandbox/itsi_file/Gemfile.lock +0 -111
- data/sandbox/itsi_file/Itsi.rb +0 -474
- data/sandbox/itsi_file/call.json +0 -1
- data/sandbox/itsi_file/echo_client/Gemfile +0 -10
- data/sandbox/itsi_file/echo_client/Gemfile.lock +0 -27
- data/sandbox/itsi_file/echo_client/README.md +0 -95
- data/sandbox/itsi_file/echo_client/echo_client.rb +0 -164
- data/sandbox/itsi_file/echo_client/gen_proto.sh +0 -17
- data/sandbox/itsi_file/echo_client/lib/echo_pb.rb +0 -16
- data/sandbox/itsi_file/echo_client/lib/echo_services_pb.rb +0 -29
- data/sandbox/itsi_file/echo_client/run_client.rb +0 -64
- data/sandbox/itsi_file/echo_client/test_compressions.sh +0 -20
- data/sandbox/itsi_file/echo_service_nonitsi/Gemfile +0 -10
- data/sandbox/itsi_file/echo_service_nonitsi/Gemfile.lock +0 -79
- data/sandbox/itsi_file/echo_service_nonitsi/echo.proto +0 -26
- data/sandbox/itsi_file/echo_service_nonitsi/echo_pb.rb +0 -16
- data/sandbox/itsi_file/echo_service_nonitsi/server.rb +0 -52
- data/sandbox/itsi_file/error.html +0 -2
- data/sandbox/itsi_file/organisations_controller.rb +0 -20
- data/sandbox/itsi_file/public/assets/image.png +0 -0
- data/sandbox/itsi_sandbox_async/Gemfile +0 -10
- data/sandbox/itsi_sandbox_async/Gemfile.lock +0 -69
- data/sandbox/itsi_sandbox_async/config.ru +0 -9
- data/sandbox/itsi_sandbox_hanami/.env +0 -2
- data/sandbox/itsi_sandbox_hanami/.gitignore +0 -6
- data/sandbox/itsi_sandbox_hanami/.rspec +0 -1
- data/sandbox/itsi_sandbox_hanami/Gemfile +0 -49
- data/sandbox/itsi_sandbox_hanami/Gemfile.lock +0 -440
- data/sandbox/itsi_sandbox_hanami/Guardfile +0 -9
- data/sandbox/itsi_sandbox_hanami/Procfile.dev +0 -2
- data/sandbox/itsi_sandbox_hanami/README.md +0 -1
- data/sandbox/itsi_sandbox_hanami/Rakefile +0 -3
- data/sandbox/itsi_sandbox_hanami/app/action.rb +0 -12
- data/sandbox/itsi_sandbox_hanami/app/actions/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/app/assets/css/app.css +0 -5
- data/sandbox/itsi_sandbox_hanami/app/assets/images/favicon.ico +0 -0
- data/sandbox/itsi_sandbox_hanami/app/assets/js/app.js +0 -1
- data/sandbox/itsi_sandbox_hanami/app/db/relation.rb +0 -10
- data/sandbox/itsi_sandbox_hanami/app/db/repo.rb +0 -10
- data/sandbox/itsi_sandbox_hanami/app/db/struct.rb +0 -10
- data/sandbox/itsi_sandbox_hanami/app/operation.rb +0 -9
- data/sandbox/itsi_sandbox_hanami/app/relations/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/app/repos/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/app/structs/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/app/templates/layouts/app.html.erb +0 -14
- data/sandbox/itsi_sandbox_hanami/app/view.rb +0 -9
- data/sandbox/itsi_sandbox_hanami/app/views/helpers.rb +0 -10
- data/sandbox/itsi_sandbox_hanami/bin/dev +0 -8
- data/sandbox/itsi_sandbox_hanami/config/app.rb +0 -8
- data/sandbox/itsi_sandbox_hanami/config/assets.js +0 -16
- data/sandbox/itsi_sandbox_hanami/config/db/migrate/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/config/db/seeds.rb +0 -15
- data/sandbox/itsi_sandbox_hanami/config/puma.rb +0 -47
- data/sandbox/itsi_sandbox_hanami/config/routes.rb +0 -7
- data/sandbox/itsi_sandbox_hanami/config/settings.rb +0 -9
- data/sandbox/itsi_sandbox_hanami/config.ru +0 -5
- data/sandbox/itsi_sandbox_hanami/db/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/lib/itsi_hanami/types.rb +0 -11
- data/sandbox/itsi_sandbox_hanami/lib/tasks/.keep +0 -0
- data/sandbox/itsi_sandbox_hanami/package-lock.json +0 -946
- data/sandbox/itsi_sandbox_hanami/package.json +0 -8
- data/sandbox/itsi_sandbox_hanami/spec/requests/root_spec.rb +0 -11
- data/sandbox/itsi_sandbox_hanami/spec/spec_helper.rb +0 -9
- data/sandbox/itsi_sandbox_hanami/spec/support/db/cleaning.rb +0 -42
- data/sandbox/itsi_sandbox_hanami/spec/support/db.rb +0 -10
- data/sandbox/itsi_sandbox_hanami/spec/support/features.rb +0 -5
- data/sandbox/itsi_sandbox_hanami/spec/support/operations.rb +0 -8
- data/sandbox/itsi_sandbox_hanami/spec/support/requests.rb +0 -13
- data/sandbox/itsi_sandbox_hanami/spec/support/rspec.rb +0 -61
- data/sandbox/itsi_sandbox_rack/Gemfile +0 -17
- data/sandbox/itsi_sandbox_rack/Gemfile.lock +0 -153
- data/sandbox/itsi_sandbox_rack/config.ru +0 -5
- data/sandbox/itsi_sandbox_rack_lint/Gemfile +0 -7
- data/sandbox/itsi_sandbox_rack_lint/Gemfile.lock +0 -27
- data/sandbox/itsi_sandbox_rack_lint/config.ru +0 -3
- data/sandbox/itsi_sandbox_rails/.dockerignore +0 -48
- data/sandbox/itsi_sandbox_rails/.gitattributes +0 -9
- data/sandbox/itsi_sandbox_rails/.github/dependabot.yml +0 -12
- data/sandbox/itsi_sandbox_rails/.github/workflows/ci.yml +0 -90
- data/sandbox/itsi_sandbox_rails/.gitignore +0 -35
- data/sandbox/itsi_sandbox_rails/.rubocop.yml +0 -8
- data/sandbox/itsi_sandbox_rails/.ruby-version +0 -1
- data/sandbox/itsi_sandbox_rails/Dockerfile +0 -69
- data/sandbox/itsi_sandbox_rails/Gemfile +0 -66
- data/sandbox/itsi_sandbox_rails/Gemfile.lock +0 -429
- data/sandbox/itsi_sandbox_rails/README.md +0 -24
- data/sandbox/itsi_sandbox_rails/Rakefile +0 -6
- data/sandbox/itsi_sandbox_rails/app/assets/config/manifest.js +0 -4
- data/sandbox/itsi_sandbox_rails/app/assets/images/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/app/assets/stylesheets/application.css +0 -15
- data/sandbox/itsi_sandbox_rails/app/channels/application_cable/channel.rb +0 -4
- data/sandbox/itsi_sandbox_rails/app/channels/application_cable/connection.rb +0 -4
- data/sandbox/itsi_sandbox_rails/app/controllers/application_controller.rb +0 -4
- data/sandbox/itsi_sandbox_rails/app/controllers/concerns/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/app/controllers/home_controller.rb +0 -66
- data/sandbox/itsi_sandbox_rails/app/controllers/live_controller.rb +0 -40
- data/sandbox/itsi_sandbox_rails/app/controllers/uploads_controller.rb +0 -29
- data/sandbox/itsi_sandbox_rails/app/helpers/application_helper.rb +0 -2
- data/sandbox/itsi_sandbox_rails/app/javascript/application.js +0 -3
- data/sandbox/itsi_sandbox_rails/app/javascript/controllers/application.js +0 -9
- data/sandbox/itsi_sandbox_rails/app/javascript/controllers/hello_controller.js +0 -7
- data/sandbox/itsi_sandbox_rails/app/javascript/controllers/index.js +0 -4
- data/sandbox/itsi_sandbox_rails/app/jobs/application_job.rb +0 -7
- data/sandbox/itsi_sandbox_rails/app/mailers/application_mailer.rb +0 -4
- data/sandbox/itsi_sandbox_rails/app/models/application_record.rb +0 -3
- data/sandbox/itsi_sandbox_rails/app/models/concerns/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/app/models/post.rb +0 -2
- data/sandbox/itsi_sandbox_rails/app/views/layouts/application.html.erb +0 -23
- data/sandbox/itsi_sandbox_rails/app/views/layouts/mailer.html.erb +0 -13
- data/sandbox/itsi_sandbox_rails/app/views/layouts/mailer.text.erb +0 -1
- data/sandbox/itsi_sandbox_rails/app/views/pwa/manifest.json.erb +0 -22
- data/sandbox/itsi_sandbox_rails/app/views/pwa/service-worker.js +0 -26
- data/sandbox/itsi_sandbox_rails/bin/brakeman +0 -7
- data/sandbox/itsi_sandbox_rails/bin/bundle +0 -109
- data/sandbox/itsi_sandbox_rails/bin/docker-entrypoint +0 -13
- data/sandbox/itsi_sandbox_rails/bin/importmap +0 -4
- data/sandbox/itsi_sandbox_rails/bin/rails +0 -4
- data/sandbox/itsi_sandbox_rails/bin/rake +0 -4
- data/sandbox/itsi_sandbox_rails/bin/rubocop +0 -8
- data/sandbox/itsi_sandbox_rails/bin/setup +0 -37
- data/sandbox/itsi_sandbox_rails/config/application.rb +0 -27
- data/sandbox/itsi_sandbox_rails/config/boot.rb +0 -4
- data/sandbox/itsi_sandbox_rails/config/cable.yml +0 -10
- data/sandbox/itsi_sandbox_rails/config/credentials.yml.enc +0 -1
- data/sandbox/itsi_sandbox_rails/config/database.yml +0 -30
- data/sandbox/itsi_sandbox_rails/config/environment.rb +0 -5
- data/sandbox/itsi_sandbox_rails/config/environments/development.rb +0 -82
- data/sandbox/itsi_sandbox_rails/config/environments/production.rb +0 -106
- data/sandbox/itsi_sandbox_rails/config/environments/test.rb +0 -67
- data/sandbox/itsi_sandbox_rails/config/importmap.rb +0 -7
- data/sandbox/itsi_sandbox_rails/config/initializers/assets.rb +0 -12
- data/sandbox/itsi_sandbox_rails/config/initializers/content_security_policy.rb +0 -25
- data/sandbox/itsi_sandbox_rails/config/initializers/filter_parameter_logging.rb +0 -8
- data/sandbox/itsi_sandbox_rails/config/initializers/inflections.rb +0 -16
- data/sandbox/itsi_sandbox_rails/config/initializers/permissions_policy.rb +0 -13
- data/sandbox/itsi_sandbox_rails/config/locales/en.yml +0 -31
- data/sandbox/itsi_sandbox_rails/config/puma.rb +0 -34
- data/sandbox/itsi_sandbox_rails/config/routes.rb +0 -23
- data/sandbox/itsi_sandbox_rails/config/storage.yml +0 -34
- data/sandbox/itsi_sandbox_rails/config.ru +0 -6
- data/sandbox/itsi_sandbox_rails/db/migrate/20250301041554_create_posts.rb +0 -10
- data/sandbox/itsi_sandbox_rails/db/schema.rb +0 -23
- data/sandbox/itsi_sandbox_rails/db/seeds.rb +0 -9
- data/sandbox/itsi_sandbox_rails/lib/assets/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/lib/tasks/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/log/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/public/404.html +0 -67
- data/sandbox/itsi_sandbox_rails/public/406-unsupported-browser.html +0 -66
- data/sandbox/itsi_sandbox_rails/public/422.html +0 -67
- data/sandbox/itsi_sandbox_rails/public/500.html +0 -66
- data/sandbox/itsi_sandbox_rails/public/icon.png +0 -0
- data/sandbox/itsi_sandbox_rails/public/icon.svg +0 -3
- data/sandbox/itsi_sandbox_rails/public/robots.txt +0 -1
- data/sandbox/itsi_sandbox_rails/storage/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/application_system_test_case.rb +0 -5
- data/sandbox/itsi_sandbox_rails/test/channels/application_cable/connection_test.rb +0 -13
- data/sandbox/itsi_sandbox_rails/test/controllers/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/fixtures/files/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/helpers/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/integration/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/mailers/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/models/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/system/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/test/test_helper.rb +0 -15
- data/sandbox/itsi_sandbox_rails/tmp/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/tmp/pids/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/tmp/storage/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/vendor/.keep +0 -0
- data/sandbox/itsi_sandbox_rails/vendor/javascript/.keep +0 -0
- data/sandbox/itsi_sandbox_roda/Gemfile +0 -5
- data/sandbox/itsi_sandbox_roda/Gemfile.lock +0 -37
- data/sandbox/itsi_sandbox_roda/config.ru +0 -39
- data/sandbox/itsi_sinatra/Gemfile +0 -9
- data/sandbox/itsi_sinatra/Gemfile.lock +0 -81
- data/sandbox/itsi_sinatra/app.rb +0 -8
- data/sandbox/pebble/docker-compose.yml +0 -11
- data/sandbox/static_files/.env +0 -1
- data/sandbox/static_files/404.html +0 -25
- data/sandbox/static_files/_DSC0102.NEF.jpg +0 -0
- data/sandbox/static_files/about.html +0 -68
- data/sandbox/static_files/tiny.html +0 -1
- data/sandbox/static_files/writebook.zip +0 -0
@@ -8,8 +8,10 @@ use async_trait::async_trait;
|
|
8
8
|
use either::Either;
|
9
9
|
use magnus::error::Result;
|
10
10
|
use serde::Deserialize;
|
11
|
+
use std::collections::HashMap;
|
11
12
|
use std::sync::{Arc, OnceLock};
|
12
13
|
use std::time::Duration;
|
14
|
+
use tracing::{debug, error, warn};
|
13
15
|
|
14
16
|
#[derive(Debug, Clone, Deserialize)]
|
15
17
|
pub struct RateLimit {
|
@@ -19,6 +21,7 @@ pub struct RateLimit {
|
|
19
21
|
#[serde(skip_deserializing)]
|
20
22
|
pub rate_limiter: OnceLock<Arc<dyn RateLimiter>>,
|
21
23
|
pub store_config: RateLimiterConfig,
|
24
|
+
pub trusted_proxies: HashMap<String, TokenSource>,
|
22
25
|
#[serde(default = "too_many_requests_error_response")]
|
23
26
|
pub error_response: ErrorResponse,
|
24
27
|
}
|
@@ -55,7 +58,12 @@ impl MiddlewareLayer for RateLimit {
|
|
55
58
|
let key_value = match &self.key {
|
56
59
|
RateLimitKey::SocketAddress => {
|
57
60
|
// Use the socket address from the context
|
58
|
-
&context.addr
|
61
|
+
if self.trusted_proxies.contains_key(&context.addr) {
|
62
|
+
let source = self.trusted_proxies.get(&context.addr).unwrap();
|
63
|
+
source.extract_token(&req).unwrap_or(&context.addr)
|
64
|
+
} else {
|
65
|
+
&context.addr
|
66
|
+
}
|
59
67
|
}
|
60
68
|
RateLimitKey::Parameter(token_source) => {
|
61
69
|
match token_source {
|
@@ -68,7 +76,7 @@ impl MiddlewareLayer for RateLimit {
|
|
68
76
|
}
|
69
77
|
} else {
|
70
78
|
// If no token is found, skip rate limiting
|
71
|
-
|
79
|
+
warn!("No token found in header for rate limiting");
|
72
80
|
return Ok(Either::Left(req));
|
73
81
|
}
|
74
82
|
}
|
@@ -77,7 +85,7 @@ impl MiddlewareLayer for RateLimit {
|
|
77
85
|
value
|
78
86
|
} else {
|
79
87
|
// If no token is found, skip rate limiting
|
80
|
-
|
88
|
+
warn!("No token found in query for rate limiting");
|
81
89
|
return Ok(Either::Left(req));
|
82
90
|
}
|
83
91
|
}
|
@@ -88,6 +96,7 @@ impl MiddlewareLayer for RateLimit {
|
|
88
96
|
// Create a rate limit key
|
89
97
|
let rate_limit_key = create_rate_limit_key(key_value, req.uri().path());
|
90
98
|
|
99
|
+
debug!(target: "middleware::rate_limit", "Rate limit key: {}", rate_limit_key);
|
91
100
|
// Get the rate limiter
|
92
101
|
if let Some(limiter) = self.rate_limiter.get() {
|
93
102
|
// Check if rate limit is exceeded
|
@@ -95,8 +104,12 @@ impl MiddlewareLayer for RateLimit {
|
|
95
104
|
let limit = self.requests;
|
96
105
|
|
97
106
|
match limiter.check_limit(&rate_limit_key, limit, timeout).await {
|
98
|
-
Ok(_) =>
|
107
|
+
Ok(_) => {
|
108
|
+
debug!(target: "middleware::rate_limit", "Rate limit not exceeded");
|
109
|
+
Ok(Either::Left(req))
|
110
|
+
}
|
99
111
|
Err(RateLimitError::RateLimitExceeded { limit, ttl, .. }) => {
|
112
|
+
debug!(target: "middleware::rate_limit", "Rate limit exceeded. Limit: {}, ttl: {}", limit, ttl);
|
100
113
|
let mut response = self
|
101
114
|
.error_response
|
102
115
|
.to_http_response(req.accept().into())
|
@@ -116,14 +129,12 @@ impl MiddlewareLayer for RateLimit {
|
|
116
129
|
Ok(Either::Right(response))
|
117
130
|
}
|
118
131
|
Err(e) => {
|
119
|
-
|
120
|
-
tracing::error!("Rate limiter error: {:?}", e);
|
132
|
+
error!("Rate limiter error: {:?}", e);
|
121
133
|
Ok(Either::Left(req))
|
122
134
|
}
|
123
135
|
}
|
124
136
|
} else {
|
125
|
-
|
126
|
-
tracing::warn!("Rate limiter not initialized");
|
137
|
+
warn!("Rate limiter not initialized");
|
127
138
|
Ok(Either::Left(req))
|
128
139
|
}
|
129
140
|
}
|
@@ -1,21 +1,19 @@
|
|
1
|
+
use super::{string_rewrite::StringRewrite, FromValue, MiddlewareLayer};
|
1
2
|
use crate::{
|
2
|
-
server::
|
3
|
+
server::{
|
4
|
+
http_message_types::{HttpRequest, HttpResponse},
|
5
|
+
redirect_type::RedirectType,
|
6
|
+
},
|
3
7
|
services::itsi_http_service::HttpRequestContext,
|
4
8
|
};
|
5
|
-
|
6
|
-
use super::{string_rewrite::StringRewrite, FromValue, MiddlewareLayer};
|
7
|
-
|
8
9
|
use async_trait::async_trait;
|
9
10
|
use either::Either;
|
10
|
-
use http::
|
11
|
+
use http::Response;
|
11
12
|
use http_body_util::{combinators::BoxBody, Empty};
|
12
13
|
use magnus::error::Result;
|
13
14
|
use serde::Deserialize;
|
15
|
+
use tracing::debug;
|
14
16
|
|
15
|
-
/// A simple API key filter.
|
16
|
-
/// The API key can be given inside the header or a query string
|
17
|
-
/// Keys are validated against a list of allowed key values (Changing these requires a restart)
|
18
|
-
///
|
19
17
|
#[derive(Debug, Clone, Deserialize)]
|
20
18
|
pub struct Redirect {
|
21
19
|
pub to: StringRewrite,
|
@@ -24,19 +22,6 @@ pub struct Redirect {
|
|
24
22
|
pub redirect_type: RedirectType,
|
25
23
|
}
|
26
24
|
|
27
|
-
#[derive(Debug, Clone, Deserialize, Default)]
|
28
|
-
pub enum RedirectType {
|
29
|
-
#[serde(rename(deserialize = "permanent"))]
|
30
|
-
#[default]
|
31
|
-
Permanent,
|
32
|
-
#[serde(rename(deserialize = "temporary"))]
|
33
|
-
Temporary,
|
34
|
-
#[serde(rename(deserialize = "found"))]
|
35
|
-
Found,
|
36
|
-
#[serde(rename(deserialize = "moved_permanently"))]
|
37
|
-
MovedPermanently,
|
38
|
-
}
|
39
|
-
|
40
25
|
#[async_trait]
|
41
26
|
impl MiddlewareLayer for Redirect {
|
42
27
|
async fn before(
|
@@ -55,21 +40,15 @@ impl Redirect {
|
|
55
40
|
context: &mut HttpRequestContext,
|
56
41
|
) -> Result<HttpResponse> {
|
57
42
|
let mut response = Response::new(BoxBody::new(Empty::new()));
|
58
|
-
*response.status_mut() =
|
59
|
-
|
60
|
-
|
61
|
-
|
62
|
-
|
63
|
-
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
magnus::Error::new(
|
68
|
-
magnus::exception::standard_error(),
|
69
|
-
format!("Invalid Rewrite String: {:?}: {}", self.to, e),
|
70
|
-
)
|
71
|
-
})?,
|
72
|
-
);
|
43
|
+
*response.status_mut() = self.redirect_type.status_code();
|
44
|
+
let destination = self.to.rewrite_request(req, context).parse().map_err(|e| {
|
45
|
+
magnus::Error::new(
|
46
|
+
magnus::exception::standard_error(),
|
47
|
+
format!("Invalid Rewrite String: {:?}: {}", self.to, e),
|
48
|
+
)
|
49
|
+
})?;
|
50
|
+
debug!(target: "middleware::redirect", "Redirecting to {:?}", destination);
|
51
|
+
response.headers_mut().append("Location", destination);
|
73
52
|
Ok(response)
|
74
53
|
}
|
75
54
|
}
|
@@ -5,7 +5,7 @@ use crate::{
|
|
5
5
|
services::itsi_http_service::HttpRequestContext,
|
6
6
|
};
|
7
7
|
|
8
|
-
use super::{FromValue, MiddlewareLayer};
|
8
|
+
use super::{FromValue, MiddlewareLayer, StringRewrite};
|
9
9
|
use async_trait::async_trait;
|
10
10
|
use either::Either;
|
11
11
|
use http::HeaderName;
|
@@ -14,30 +14,40 @@ use serde::Deserialize;
|
|
14
14
|
|
15
15
|
#[derive(Debug, Clone, Deserialize)]
|
16
16
|
pub struct RequestHeaders {
|
17
|
-
pub additions: HashMap<String, Vec<
|
17
|
+
pub additions: HashMap<String, Vec<StringRewrite>>,
|
18
18
|
pub removals: Vec<String>,
|
19
19
|
}
|
20
|
-
|
21
20
|
#[async_trait]
|
22
21
|
impl MiddlewareLayer for RequestHeaders {
|
23
22
|
async fn before(
|
24
23
|
&self,
|
25
24
|
mut req: HttpRequest,
|
26
|
-
|
25
|
+
context: &mut HttpRequestContext,
|
27
26
|
) -> Result<Either<HttpRequest, HttpResponse>> {
|
28
|
-
let
|
29
|
-
|
30
|
-
headers.remove(removal);
|
31
|
-
}
|
27
|
+
let mut headers_to_add = Vec::new();
|
28
|
+
|
32
29
|
for (header_name, header_values) in &self.additions {
|
33
|
-
|
34
|
-
|
35
|
-
if let Ok(parsed_header_value) =
|
36
|
-
|
30
|
+
if let Ok(parsed_header_name) = header_name.parse::<HeaderName>() {
|
31
|
+
for header_value in header_values {
|
32
|
+
if let Ok(parsed_header_value) =
|
33
|
+
header_value.rewrite_request(&req, context).parse()
|
34
|
+
{
|
35
|
+
headers_to_add.push((parsed_header_name.clone(), parsed_header_value));
|
37
36
|
}
|
38
37
|
}
|
39
38
|
}
|
40
39
|
}
|
40
|
+
|
41
|
+
let headers = req.headers_mut();
|
42
|
+
|
43
|
+
for removal in &self.removals {
|
44
|
+
headers.remove(removal);
|
45
|
+
}
|
46
|
+
|
47
|
+
for (name, value) in headers_to_add {
|
48
|
+
headers.append(name, value);
|
49
|
+
}
|
50
|
+
|
41
51
|
Ok(Either::Left(req))
|
42
52
|
}
|
43
53
|
}
|
@@ -1,6 +1,6 @@
|
|
1
1
|
use std::collections::HashMap;
|
2
2
|
|
3
|
-
use super::{FromValue, MiddlewareLayer};
|
3
|
+
use super::{FromValue, MiddlewareLayer, StringRewrite};
|
4
4
|
use crate::{
|
5
5
|
server::http_message_types::HttpResponse, services::itsi_http_service::HttpRequestContext,
|
6
6
|
};
|
@@ -10,26 +10,41 @@ use serde::Deserialize;
|
|
10
10
|
|
11
11
|
#[derive(Debug, Clone, Deserialize)]
|
12
12
|
pub struct ResponseHeaders {
|
13
|
-
pub additions: HashMap<String, Vec<
|
13
|
+
pub additions: HashMap<String, Vec<StringRewrite>>,
|
14
14
|
pub removals: Vec<String>,
|
15
15
|
}
|
16
16
|
|
17
17
|
#[async_trait]
|
18
18
|
impl MiddlewareLayer for ResponseHeaders {
|
19
|
-
async fn after(
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
19
|
+
async fn after(
|
20
|
+
&self,
|
21
|
+
mut resp: HttpResponse,
|
22
|
+
context: &mut HttpRequestContext,
|
23
|
+
) -> HttpResponse {
|
24
|
+
let mut headers_to_add = Vec::new();
|
25
|
+
|
24
26
|
for (header_name, header_values) in &self.additions {
|
25
|
-
|
26
|
-
|
27
|
-
if let Ok(parsed_header_value) =
|
28
|
-
|
27
|
+
if let Ok(parsed_header_name) = header_name.parse::<HeaderName>() {
|
28
|
+
for header_value in header_values {
|
29
|
+
if let Ok(parsed_header_value) =
|
30
|
+
header_value.rewrite_response(&resp, context).parse()
|
31
|
+
{
|
32
|
+
headers_to_add.push((parsed_header_name.clone(), parsed_header_value));
|
29
33
|
}
|
30
34
|
}
|
31
35
|
}
|
32
36
|
}
|
37
|
+
|
38
|
+
let headers = resp.headers_mut();
|
39
|
+
|
40
|
+
for removal in &self.removals {
|
41
|
+
headers.remove(removal);
|
42
|
+
}
|
43
|
+
|
44
|
+
for (name, value) in headers_to_add {
|
45
|
+
headers.append(name, value);
|
46
|
+
}
|
47
|
+
|
33
48
|
resp
|
34
49
|
}
|
35
50
|
}
|
@@ -42,7 +42,7 @@ impl FromStr for RequestType {
|
|
42
42
|
}
|
43
43
|
|
44
44
|
impl RubyApp {
|
45
|
-
pub fn from_value(params: HeapVal) -> magnus::error::Result<Self
|
45
|
+
pub fn from_value(params: HeapVal) -> magnus::error::Result<Arc<Self>> {
|
46
46
|
let app = params.funcall::<_, _, Proc>(Symbol::new("[]"), ("app_proc",))?;
|
47
47
|
let sendfile = params
|
48
48
|
.funcall::<_, _, bool>(Symbol::new("[]"), ("sendfile",))
|
@@ -61,13 +61,13 @@ impl RubyApp {
|
|
61
61
|
.parse()
|
62
62
|
.unwrap_or(RequestType::Http);
|
63
63
|
|
64
|
-
Ok(RubyApp {
|
64
|
+
Ok(Arc::new(RubyApp {
|
65
65
|
app: Arc::new(app.into()),
|
66
66
|
sendfile,
|
67
67
|
nonblocking,
|
68
68
|
request_type,
|
69
69
|
base_path,
|
70
|
-
})
|
70
|
+
}))
|
71
71
|
}
|
72
72
|
}
|
73
73
|
|
@@ -19,6 +19,7 @@ use magnus::error::Result;
|
|
19
19
|
use regex::Regex;
|
20
20
|
use serde::Deserialize;
|
21
21
|
use std::{collections::HashMap, path::PathBuf, sync::OnceLock, time::Duration};
|
22
|
+
use tracing::debug;
|
22
23
|
|
23
24
|
#[derive(Debug, Deserialize)]
|
24
25
|
pub struct StaticAssets {
|
@@ -59,6 +60,9 @@ impl MiddlewareLayer for StaticAssets {
|
|
59
60
|
self.base_path_regex
|
60
61
|
.set(Regex::new(&self.base_path).map_err(ItsiError::new)?)
|
61
62
|
.map_err(ItsiError::new)?;
|
63
|
+
|
64
|
+
debug!(target: "middleware::static_assets", "Base path regexp: {}", self.base_path);
|
65
|
+
|
62
66
|
self.file_server
|
63
67
|
.set(StaticFileServer::new(StaticFileServerConfig {
|
64
68
|
root_dir: self.root_dir.clone(),
|
@@ -67,10 +71,11 @@ impl MiddlewareLayer for StaticAssets {
|
|
67
71
|
max_entries: self.max_files_in_memory,
|
68
72
|
try_html_extension: self.try_html_extension,
|
69
73
|
max_file_size: self.max_file_size_in_memory,
|
74
|
+
headers: self.headers.clone(),
|
70
75
|
recheck_interval: Duration::from_secs(self.file_check_interval),
|
71
76
|
serve_hidden_files: self.serve_hidden_files,
|
72
77
|
allowed_extensions: self.allowed_extensions.clone(),
|
73
|
-
}))
|
78
|
+
})?)
|
74
79
|
.map_err(ItsiError::new)?;
|
75
80
|
Ok(())
|
76
81
|
}
|
@@ -82,11 +87,12 @@ impl MiddlewareLayer for StaticAssets {
|
|
82
87
|
) -> Result<Either<HttpRequest, HttpResponse>> {
|
83
88
|
// Only handle GET and HEAD requests
|
84
89
|
if req.method() != Method::GET && req.method() != Method::HEAD {
|
90
|
+
debug!(target: "middleware::static_assets", "Refusing to handle non-GET/HEAD request");
|
85
91
|
return Ok(Either::Left(req));
|
86
92
|
}
|
87
93
|
let abs_path = req.uri().path();
|
88
94
|
let rel_path = if !self.relative_path {
|
89
|
-
abs_path
|
95
|
+
abs_path.trim_start_matches("/")
|
90
96
|
} else {
|
91
97
|
let base_path = self
|
92
98
|
.base_path_regex
|
@@ -103,6 +109,7 @@ impl MiddlewareLayer for StaticAssets {
|
|
103
109
|
}
|
104
110
|
};
|
105
111
|
|
112
|
+
debug!(target: "middleware::static_assets", "Asset path is {}", rel_path);
|
106
113
|
// Determine if this is a HEAD request
|
107
114
|
let is_head_request = req.method() == Method::HEAD;
|
108
115
|
|
@@ -98,8 +98,13 @@ impl StringRewrite {
|
|
98
98
|
}
|
99
99
|
}
|
100
100
|
other => {
|
101
|
-
|
102
|
-
|
101
|
+
if let Some(header_val) = req.headers().get(other) {
|
102
|
+
if let Ok(s) = header_val.to_str() {
|
103
|
+
s.to_string()
|
104
|
+
} else {
|
105
|
+
"".to_string()
|
106
|
+
}
|
107
|
+
} else if let Some(caps) = &captures {
|
103
108
|
if let Some(m) = caps.name(other) {
|
104
109
|
m.as_str().to_string()
|
105
110
|
} else {
|
@@ -146,8 +151,13 @@ impl StringRewrite {
|
|
146
151
|
}
|
147
152
|
}
|
148
153
|
other => {
|
149
|
-
|
150
|
-
|
154
|
+
// Try pulling from response headers first
|
155
|
+
if let Some(val) = resp.headers().get(other) {
|
156
|
+
if let Ok(s) = val.to_str() {
|
157
|
+
s.to_string()
|
158
|
+
} else {
|
159
|
+
"".to_string()
|
160
|
+
}
|
151
161
|
} else {
|
152
162
|
format!("{{{}}}", other)
|
153
163
|
}
|
@@ -1,5 +1,7 @@
|
|
1
1
|
use serde::{Deserialize, Serialize};
|
2
2
|
|
3
|
+
use crate::server::http_message_types::{HttpRequest, RequestExt};
|
4
|
+
|
3
5
|
#[derive(Debug, Clone, Serialize, Deserialize)]
|
4
6
|
pub enum TokenSource {
|
5
7
|
#[serde(rename(deserialize = "header"))]
|
@@ -10,3 +12,20 @@ pub enum TokenSource {
|
|
10
12
|
#[serde(rename(deserialize = "query"))]
|
11
13
|
Query(String),
|
12
14
|
}
|
15
|
+
|
16
|
+
impl TokenSource {
|
17
|
+
pub fn extract_token<'req>(&self, req: &'req HttpRequest) -> Option<&'req str> {
|
18
|
+
match self {
|
19
|
+
TokenSource::Header { name, prefix } => req.headers().get(name).and_then(|value| {
|
20
|
+
value.to_str().ok().and_then(|value| {
|
21
|
+
if let Some(prefix) = prefix {
|
22
|
+
value.strip_prefix(prefix).map(|v| v.trim())
|
23
|
+
} else {
|
24
|
+
Some(value)
|
25
|
+
}
|
26
|
+
})
|
27
|
+
}),
|
28
|
+
TokenSource::Query(query_name) => req.query_param(query_name),
|
29
|
+
}
|
30
|
+
}
|
31
|
+
}
|
@@ -2,11 +2,16 @@ mod middleware;
|
|
2
2
|
mod middlewares;
|
3
3
|
use http::header::{ACCEPT, CONTENT_TYPE, HOST};
|
4
4
|
use itsi_rb_helpers::HeapVal;
|
5
|
-
use magnus::{
|
5
|
+
use magnus::{
|
6
|
+
error::Result, rb_sys::AsRawValue, value::ReprValue, RArray, RHash, Ruby, TryConvert, Value,
|
7
|
+
};
|
6
8
|
pub use middleware::Middleware;
|
7
9
|
pub use middlewares::*;
|
8
10
|
use regex::{Regex, RegexSet};
|
9
|
-
use std::{
|
11
|
+
use std::{
|
12
|
+
collections::{hash_map::Entry::Vacant, HashMap},
|
13
|
+
sync::Arc,
|
14
|
+
};
|
10
15
|
use tracing::debug;
|
11
16
|
|
12
17
|
use super::http_message_types::HttpRequest;
|
@@ -16,6 +21,7 @@ pub struct MiddlewareSet {
|
|
16
21
|
pub route_set: RegexSet,
|
17
22
|
pub patterns: Vec<Arc<Regex>>,
|
18
23
|
pub stacks: HashMap<usize, MiddlewareStack>,
|
24
|
+
unique_middlewares: HashMap<u64, Middleware>,
|
19
25
|
}
|
20
26
|
|
21
27
|
#[derive(Debug)]
|
@@ -128,6 +134,9 @@ impl MiddlewareStack {
|
|
128
134
|
|
129
135
|
impl MiddlewareSet {
|
130
136
|
pub fn new(routes_raw: Option<HeapVal>) -> Result<Self> {
|
137
|
+
let mut unique_middlewares = HashMap::new();
|
138
|
+
clear_value_cache();
|
139
|
+
|
131
140
|
if let Some(routes_raw) = routes_raw {
|
132
141
|
let mut stacks = HashMap::new();
|
133
142
|
let mut routes = vec![];
|
@@ -147,22 +156,65 @@ impl MiddlewareSet {
|
|
147
156
|
"Route is missing :route key",
|
148
157
|
))?
|
149
158
|
.funcall::<_, _, String>("source", ())?;
|
159
|
+
|
150
160
|
let middleware =
|
151
|
-
|
161
|
+
RHash::from_value(route_hash.get("middleware").ok_or(magnus::Error::new(
|
152
162
|
magnus::exception::standard_error(),
|
153
163
|
"Route is missing middleware key",
|
154
164
|
))?)
|
155
165
|
.ok_or(magnus::Error::new(
|
156
166
|
magnus::exception::standard_error(),
|
157
|
-
format!("middleware must be
|
167
|
+
format!("middleware must be a hash. Got {:?}", routes_raw),
|
158
168
|
))?;
|
159
169
|
|
170
|
+
let ruby = Ruby::get().unwrap();
|
160
171
|
let mut layers = middleware
|
161
|
-
.
|
162
|
-
.
|
172
|
+
.enumeratorize("each", ())
|
173
|
+
.flat_map(|pair| {
|
174
|
+
let pair = RArray::from_value(pair.unwrap()).unwrap();
|
175
|
+
let middleware_type: String = pair.entry(0).unwrap();
|
176
|
+
let value: Value = pair.entry(1).unwrap();
|
177
|
+
let middleware_values: Vec<Value> = if value.is_kind_of(ruby.class_array())
|
178
|
+
{
|
179
|
+
RArray::from_value(value)
|
180
|
+
.ok_or_else(|| {
|
181
|
+
magnus::Error::new(
|
182
|
+
magnus::exception::type_error(),
|
183
|
+
"Expected array",
|
184
|
+
)
|
185
|
+
})
|
186
|
+
.unwrap()
|
187
|
+
.into_iter()
|
188
|
+
.collect()
|
189
|
+
} else {
|
190
|
+
vec![value]
|
191
|
+
};
|
192
|
+
middleware_values
|
193
|
+
.into_iter()
|
194
|
+
.map(|value| {
|
195
|
+
let middleware =
|
196
|
+
if let Vacant(e) = unique_middlewares.entry(value.as_raw()) {
|
197
|
+
let middleware = MiddlewareSet::parse_middleware(
|
198
|
+
middleware_type.clone(),
|
199
|
+
value,
|
200
|
+
);
|
201
|
+
if let Ok(middleware) = middleware.as_ref() {
|
202
|
+
e.insert(middleware.clone());
|
203
|
+
};
|
204
|
+
middleware
|
205
|
+
} else {
|
206
|
+
Ok(unique_middlewares.get(&value.as_raw()).unwrap().clone())
|
207
|
+
};
|
208
|
+
middleware
|
209
|
+
})
|
210
|
+
.collect::<Vec<Result<Middleware>>>()
|
211
|
+
})
|
163
212
|
.collect::<Result<Vec<_>>>()?;
|
164
213
|
routes.push(route_raw);
|
165
214
|
layers.sort();
|
215
|
+
|
216
|
+
debug!("Middleware at index: {} has layers: {:?}", index, layers);
|
217
|
+
|
166
218
|
stacks.insert(
|
167
219
|
index,
|
168
220
|
MiddlewareStack {
|
@@ -184,6 +236,7 @@ impl MiddlewareSet {
|
|
184
236
|
format!("Failed to create route set: {}", e),
|
185
237
|
)
|
186
238
|
})?,
|
239
|
+
unique_middlewares,
|
187
240
|
patterns: routes
|
188
241
|
.into_iter()
|
189
242
|
.map(|r| Regex::new(&r))
|
@@ -241,47 +294,28 @@ impl MiddlewareSet {
|
|
241
294
|
))
|
242
295
|
}
|
243
296
|
|
244
|
-
pub fn parse_middleware(
|
245
|
-
let middleware_hash = RHash::from_value(middleware).ok_or(magnus::Error::new(
|
246
|
-
magnus::exception::standard_error(),
|
247
|
-
format!("Filter must be a hash. Got {:?}", middleware),
|
248
|
-
))?;
|
249
|
-
let middleware_type: String = middleware_hash
|
250
|
-
.get("type")
|
251
|
-
.ok_or(magnus::Error::new(
|
252
|
-
magnus::exception::standard_error(),
|
253
|
-
format!("Filter must have a :type key. Got {:?}", middleware_hash),
|
254
|
-
))?
|
255
|
-
.to_string();
|
297
|
+
pub fn parse_middleware(middleware_type: String, parameters: Value) -> Result<Middleware> {
|
256
298
|
let mw_type = middleware_type.clone();
|
257
299
|
|
258
|
-
|
259
|
-
magnus::exception::standard_error(),
|
260
|
-
format!(
|
261
|
-
"Filter must have a :parameters key. Got {:?}",
|
262
|
-
middleware_hash
|
263
|
-
),
|
264
|
-
))?;
|
265
|
-
|
300
|
+
debug!(target: "itsi_server::middleware_stack", "Parsing middleware: {} from {}", mw_type, parameters);
|
266
301
|
let result = (move || -> Result<Middleware> {
|
267
302
|
match mw_type.as_str() {
|
268
303
|
"allow_list" => Ok(Middleware::AllowList(AllowList::from_value(parameters)?)),
|
269
304
|
"auth_basic" => Ok(Middleware::AuthBasic(AuthBasic::from_value(parameters)?)),
|
270
|
-
"auth_jwt" => Ok(Middleware::AuthJwt(
|
271
|
-
parameters,
|
272
|
-
)?))),
|
305
|
+
"auth_jwt" => Ok(Middleware::AuthJwt(AuthJwt::from_value(parameters)?)),
|
273
306
|
"auth_api_key" => Ok(Middleware::AuthAPIKey(AuthAPIKey::from_value(parameters)?)),
|
274
307
|
"cache_control" => Ok(Middleware::CacheControl(CacheControl::from_value(
|
275
308
|
parameters,
|
276
309
|
)?)),
|
277
310
|
"deny_list" => Ok(Middleware::DenyList(DenyList::from_value(parameters)?)),
|
278
311
|
"etag" => Ok(Middleware::ETag(ETag::from_value(parameters)?)),
|
312
|
+
"csp" => Ok(Middleware::Csp(Csp::from_value(parameters)?)),
|
279
313
|
"intrusion_protection" => Ok({
|
280
314
|
Middleware::IntrusionProtection(IntrusionProtection::from_value(parameters)?)
|
281
315
|
}),
|
282
316
|
"max_body" => Ok(Middleware::MaxBody(MaxBody::from_value(parameters)?)),
|
283
317
|
"rate_limit" => Ok(Middleware::RateLimit(RateLimit::from_value(parameters)?)),
|
284
|
-
"cors" => Ok(Middleware::Cors(
|
318
|
+
"cors" => Ok(Middleware::Cors(Cors::from_value(parameters)?)),
|
285
319
|
"request_headers" => Ok(Middleware::RequestHeaders(RequestHeaders::from_value(
|
286
320
|
parameters,
|
287
321
|
)?)),
|
@@ -294,7 +328,7 @@ impl MiddlewareSet {
|
|
294
328
|
"static_response" => Ok(Middleware::StaticResponse(StaticResponse::from_value(
|
295
329
|
parameters,
|
296
330
|
)?)),
|
297
|
-
"
|
331
|
+
"compress" => Ok(Middleware::Compression(Compression::from_value(
|
298
332
|
parameters,
|
299
333
|
)?)),
|
300
334
|
"log_requests" => Ok(Middleware::LogRequests(LogRequests::from_value(
|
@@ -310,6 +344,8 @@ impl MiddlewareSet {
|
|
310
344
|
}
|
311
345
|
})();
|
312
346
|
|
347
|
+
debug!(target: "itsi_server::middleware_stack", "Stack layer init result {:?}", result);
|
348
|
+
|
313
349
|
match result {
|
314
350
|
Ok(result) => Ok(result),
|
315
351
|
Err(err) => Err(magnus::Error::new(
|
@@ -323,10 +359,8 @@ impl MiddlewareSet {
|
|
323
359
|
}
|
324
360
|
|
325
361
|
pub async fn initialize_layers(&self) -> Result<()> {
|
326
|
-
for
|
327
|
-
|
328
|
-
middleware.initialize().await?;
|
329
|
-
}
|
362
|
+
for middleware in self.unique_middlewares.values() {
|
363
|
+
middleware.initialize().await?;
|
330
364
|
}
|
331
365
|
Ok(())
|
332
366
|
}
|
@@ -0,0 +1,26 @@
|
|
1
|
+
use http::StatusCode;
|
2
|
+
use serde::Deserialize;
|
3
|
+
|
4
|
+
#[derive(Debug, Clone, Deserialize, Default)]
|
5
|
+
pub enum RedirectType {
|
6
|
+
#[serde(rename(deserialize = "permanent"))]
|
7
|
+
#[default]
|
8
|
+
Permanent,
|
9
|
+
#[serde(rename(deserialize = "temporary"))]
|
10
|
+
Temporary,
|
11
|
+
#[serde(rename(deserialize = "found"))]
|
12
|
+
Found,
|
13
|
+
#[serde(rename(deserialize = "moved_permanently"))]
|
14
|
+
MovedPermanently,
|
15
|
+
}
|
16
|
+
|
17
|
+
impl RedirectType {
|
18
|
+
pub fn status_code(&self) -> StatusCode {
|
19
|
+
match self {
|
20
|
+
RedirectType::Permanent => StatusCode::PERMANENT_REDIRECT,
|
21
|
+
RedirectType::Temporary => StatusCode::TEMPORARY_REDIRECT,
|
22
|
+
RedirectType::Found => StatusCode::FOUND,
|
23
|
+
RedirectType::MovedPermanently => StatusCode::MOVED_PERMANENTLY,
|
24
|
+
}
|
25
|
+
}
|
26
|
+
}
|