rails-http-lab 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 455a98547ed2be13947848e16d5225d1107b5a4cbce170ebf6b5d8bcfcdf071a
+  data.tar.gz: b38a9225af1559ad6ead838f4fede715ac4ed399fd2d9fd6c79e32787d400714
+SHA512:
+  metadata.gz: 895dc4334974bb9bb08e07a8fdbcb3f4e8f7b50fa7b7ed846930fdd63cf49d3a9e3ec28b94167bc7cc6bf0963ba649b000eb89f51c2fd4daf41a3fec9dbf90a2
+  data.tar.gz: 84f1c94df54f49893c87e0790de96acc2d574eddf9d664222e08d6ea4866a0994f831099c630fd76e2358059093d143fb23edd83aabc50f567c5988c599cf7bb

data/LICENSE.txt

@@ -0,0 +1,15 @@
+MIT License
+
+Copyright (c) 2026 Jackson Pires
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.

data/README.md

@@ -0,0 +1,60 @@
+# rails-http-lab
+
+In-app HTTP request lab for Rails. Mounts a UI at `/rails/http-lab` and persists collections as `.bru` files that are interchangeable with the [Bruno](https://www.usebruno.com/) desktop app.
+
+No external app, no separate workspace — your requests live next to the code that serves them, version-controlled in `docs/http-lab/`.
+
+![Rails HTTP Lab](https://raw.githubusercontent.com/jacksonpires/rails-http-lab/main/docs/rails-http-lab.png)
+
+## Why
+
+Postman / Insomnia / Bruno are great, but every one of them lives outside your
+Rails app and outside your repo. With `rails-http-lab`:
+
+- Requests are **files in the repo** (`docs/http-lab/*.bru`), reviewable in PRs.
+- The UI runs **inside your Rails app** — no CORS, can reach internal services.
+- Files use the **Bruno format**, so the same collection opens in Bruno desktop.
+  Round-trip is byte-stable (verified against the public Bruno corpus).
+
+## Install
+
+```ruby
+# Gemfile
+gem "rails-http-lab", group: :development
+```
+
+```bash
+bundle install
+bin/rails g rails_http_lab:install
+```
+
+Visit `http://localhost:3000/rails/http-lab`.
+
+## Configuration
+
+`config/initializers/rails_http_lab.rb`:
+
+```ruby
+RailsHttpLab.configure do |c|
+  c.mount_path   = "/rails/http-lab"                # default
+  c.storage_path = Rails.root.join("docs/http-lab") # default
+  c.enabled_envs = %i[development]                  # default
+  # c.authenticator = ->(request) { request.session[:admin] }
+end
+```
+
+## Security
+
+The executor performs HTTP requests **from the Rails server**. That's the point —
+it lets you reach internal services without CORS. It is also a confused-deputy
+risk if exposed to untrusted users. Defaults:
+
+- Enabled only in `development` (`enabled_envs`).
+- Enabling in `production` requires an `authenticator` callable; the engine
+  refuses to boot otherwise.
+- Bruno `script` and `tests` blocks are **persisted but not executed** to avoid
+  arbitrary code execution. Run them in Bruno itself.
+
+## License
+
+MIT