spikard 0.5.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/LICENSE +1 -1
- data/README.md +674 -674
- data/ext/spikard_rb/Cargo.toml +17 -17
- data/ext/spikard_rb/extconf.rb +13 -10
- data/ext/spikard_rb/src/lib.rs +6 -6
- data/lib/spikard/app.rb +405 -405
- data/lib/spikard/background.rb +27 -27
- data/lib/spikard/config.rb +396 -396
- data/lib/spikard/converters.rb +13 -13
- data/lib/spikard/handler_wrapper.rb +113 -113
- data/lib/spikard/provide.rb +214 -214
- data/lib/spikard/response.rb +173 -173
- data/lib/spikard/schema.rb +243 -243
- data/lib/spikard/sse.rb +111 -111
- data/lib/spikard/streaming_response.rb +44 -44
- data/lib/spikard/testing.rb +256 -256
- data/lib/spikard/upload_file.rb +131 -131
- data/lib/spikard/version.rb +5 -5
- data/lib/spikard/websocket.rb +59 -59
- data/lib/spikard.rb +43 -43
- data/sig/spikard.rbs +366 -366
- data/vendor/crates/spikard-bindings-shared/Cargo.toml +63 -63
- data/vendor/crates/spikard-bindings-shared/examples/config_extraction.rs +132 -132
- data/vendor/crates/spikard-bindings-shared/src/config_extractor.rs +752 -752
- data/vendor/crates/spikard-bindings-shared/src/conversion_traits.rs +194 -194
- data/vendor/crates/spikard-bindings-shared/src/di_traits.rs +246 -246
- data/vendor/crates/spikard-bindings-shared/src/error_response.rs +401 -401
- data/vendor/crates/spikard-bindings-shared/src/handler_base.rs +238 -238
- data/vendor/crates/spikard-bindings-shared/src/lib.rs +24 -24
- data/vendor/crates/spikard-bindings-shared/src/lifecycle_base.rs +292 -292
- data/vendor/crates/spikard-bindings-shared/src/lifecycle_executor.rs +616 -616
- data/vendor/crates/spikard-bindings-shared/src/response_builder.rs +305 -305
- data/vendor/crates/spikard-bindings-shared/src/test_client_base.rs +248 -248
- data/vendor/crates/spikard-bindings-shared/src/validation_helpers.rs +351 -351
- data/vendor/crates/spikard-bindings-shared/tests/comprehensive_coverage.rs +454 -454
- data/vendor/crates/spikard-bindings-shared/tests/error_response_edge_cases.rs +383 -383
- data/vendor/crates/spikard-bindings-shared/tests/handler_base_integration.rs +280 -280
- data/vendor/crates/spikard-core/Cargo.toml +40 -40
- data/vendor/crates/spikard-core/src/bindings/mod.rs +3 -3
- data/vendor/crates/spikard-core/src/bindings/response.rs +133 -133
- data/vendor/crates/spikard-core/src/debug.rs +127 -127
- data/vendor/crates/spikard-core/src/di/container.rs +702 -702
- data/vendor/crates/spikard-core/src/di/dependency.rs +273 -273
- data/vendor/crates/spikard-core/src/di/error.rs +118 -118
- data/vendor/crates/spikard-core/src/di/factory.rs +534 -534
- data/vendor/crates/spikard-core/src/di/graph.rs +506 -506
- data/vendor/crates/spikard-core/src/di/mod.rs +192 -192
- data/vendor/crates/spikard-core/src/di/resolved.rs +405 -405
- data/vendor/crates/spikard-core/src/di/value.rs +281 -281
- data/vendor/crates/spikard-core/src/errors.rs +69 -69
- data/vendor/crates/spikard-core/src/http.rs +415 -415
- data/vendor/crates/spikard-core/src/lib.rs +29 -29
- data/vendor/crates/spikard-core/src/lifecycle.rs +1186 -1186
- data/vendor/crates/spikard-core/src/metadata.rs +389 -389
- data/vendor/crates/spikard-core/src/parameters.rs +2525 -2525
- data/vendor/crates/spikard-core/src/problem.rs +344 -344
- data/vendor/crates/spikard-core/src/request_data.rs +1154 -1154
- data/vendor/crates/spikard-core/src/router.rs +510 -510
- data/vendor/crates/spikard-core/src/schema_registry.rs +183 -183
- data/vendor/crates/spikard-core/src/type_hints.rs +304 -304
- data/vendor/crates/spikard-core/src/validation/error_mapper.rs +696 -688
- data/vendor/crates/spikard-core/src/validation/mod.rs +457 -457
- data/vendor/crates/spikard-http/Cargo.toml +62 -64
- data/vendor/crates/spikard-http/examples/sse-notifications.rs +148 -148
- data/vendor/crates/spikard-http/examples/websocket-chat.rs +92 -92
- data/vendor/crates/spikard-http/src/auth.rs +296 -296
- data/vendor/crates/spikard-http/src/background.rs +1860 -1860
- data/vendor/crates/spikard-http/src/bindings/mod.rs +3 -3
- data/vendor/crates/spikard-http/src/bindings/response.rs +1 -1
- data/vendor/crates/spikard-http/src/body_metadata.rs +8 -8
- data/vendor/crates/spikard-http/src/cors.rs +1005 -1005
- data/vendor/crates/spikard-http/src/debug.rs +128 -128
- data/vendor/crates/spikard-http/src/di_handler.rs +1668 -1668
- data/vendor/crates/spikard-http/src/handler_response.rs +901 -901
- data/vendor/crates/spikard-http/src/handler_trait.rs +838 -830
- data/vendor/crates/spikard-http/src/handler_trait_tests.rs +290 -290
- data/vendor/crates/spikard-http/src/lib.rs +534 -534
- data/vendor/crates/spikard-http/src/lifecycle/adapter.rs +230 -230
- data/vendor/crates/spikard-http/src/lifecycle.rs +1193 -1193
- data/vendor/crates/spikard-http/src/middleware/mod.rs +560 -540
- data/vendor/crates/spikard-http/src/middleware/multipart.rs +912 -912
- data/vendor/crates/spikard-http/src/middleware/urlencoded.rs +513 -513
- data/vendor/crates/spikard-http/src/middleware/validation.rs +768 -735
- data/vendor/crates/spikard-http/src/openapi/mod.rs +309 -309
- data/vendor/crates/spikard-http/src/openapi/parameter_extraction.rs +535 -535
- data/vendor/crates/spikard-http/src/openapi/schema_conversion.rs +1363 -1363
- data/vendor/crates/spikard-http/src/openapi/spec_generation.rs +665 -665
- data/vendor/crates/spikard-http/src/query_parser.rs +793 -793
- data/vendor/crates/spikard-http/src/response.rs +720 -720
- data/vendor/crates/spikard-http/src/server/handler.rs +1650 -1650
- data/vendor/crates/spikard-http/src/server/lifecycle_execution.rs +234 -234
- data/vendor/crates/spikard-http/src/server/mod.rs +1593 -1502
- data/vendor/crates/spikard-http/src/server/request_extraction.rs +789 -770
- data/vendor/crates/spikard-http/src/server/routing_factory.rs +629 -599
- data/vendor/crates/spikard-http/src/sse.rs +1409 -1409
- data/vendor/crates/spikard-http/src/testing/form.rs +52 -52
- data/vendor/crates/spikard-http/src/testing/multipart.rs +64 -60
- data/vendor/crates/spikard-http/src/testing/test_client.rs +311 -283
- data/vendor/crates/spikard-http/src/testing.rs +406 -377
- data/vendor/crates/spikard-http/src/websocket.rs +1404 -1375
- data/vendor/crates/spikard-http/tests/background_behavior.rs +832 -832
- data/vendor/crates/spikard-http/tests/common/handlers.rs +309 -309
- data/vendor/crates/spikard-http/tests/common/mod.rs +26 -26
- data/vendor/crates/spikard-http/tests/di_integration.rs +192 -192
- data/vendor/crates/spikard-http/tests/doc_snippets.rs +5 -5
- data/vendor/crates/spikard-http/tests/lifecycle_execution.rs +1093 -1093
- data/vendor/crates/spikard-http/tests/multipart_behavior.rs +656 -656
- data/vendor/crates/spikard-http/tests/server_config_builder.rs +314 -314
- data/vendor/crates/spikard-http/tests/sse_behavior.rs +620 -620
- data/vendor/crates/spikard-http/tests/websocket_behavior.rs +663 -663
- data/vendor/crates/spikard-rb/Cargo.toml +48 -48
- data/vendor/crates/spikard-rb/build.rs +199 -199
- data/vendor/crates/spikard-rb/src/background.rs +63 -63
- data/vendor/crates/spikard-rb/src/config/mod.rs +5 -5
- data/vendor/crates/spikard-rb/src/config/server_config.rs +285 -285
- data/vendor/crates/spikard-rb/src/conversion.rs +554 -554
- data/vendor/crates/spikard-rb/src/di/builder.rs +100 -100
- data/vendor/crates/spikard-rb/src/di/mod.rs +375 -375
- data/vendor/crates/spikard-rb/src/handler.rs +618 -618
- data/vendor/crates/spikard-rb/src/integration/mod.rs +3 -3
- data/vendor/crates/spikard-rb/src/lib.rs +1806 -1810
- data/vendor/crates/spikard-rb/src/lifecycle.rs +275 -275
- data/vendor/crates/spikard-rb/src/metadata/mod.rs +5 -5
- data/vendor/crates/spikard-rb/src/metadata/route_extraction.rs +442 -447
- data/vendor/crates/spikard-rb/src/runtime/mod.rs +5 -5
- data/vendor/crates/spikard-rb/src/runtime/server_runner.rs +324 -324
- data/vendor/crates/spikard-rb/src/server.rs +305 -308
- data/vendor/crates/spikard-rb/src/sse.rs +231 -231
- data/vendor/crates/spikard-rb/src/testing/client.rs +538 -551
- data/vendor/crates/spikard-rb/src/testing/mod.rs +7 -7
- data/vendor/crates/spikard-rb/src/testing/sse.rs +143 -143
- data/vendor/crates/spikard-rb/src/testing/websocket.rs +608 -635
- data/vendor/crates/spikard-rb/src/websocket.rs +377 -374
- metadata +15 -1
|
@@ -1,351 +1,351 @@
|
|
|
1
|
-
//! Shared validation utilities
|
|
2
|
-
|
|
3
|
-
use serde_json::Value;
|
|
4
|
-
|
|
5
|
-
/// Helper for validating request headers
|
|
6
|
-
pub struct HeaderValidator;
|
|
7
|
-
|
|
8
|
-
impl HeaderValidator {
|
|
9
|
-
/// Validate that required headers are present
|
|
10
|
-
pub fn validate_required(headers: &[(String, String)], required: &[&str]) -> Result<(), String> {
|
|
11
|
-
let header_names: std::collections::HashSet<_> = headers.iter().map(|(k, _)| k.to_lowercase()).collect();
|
|
12
|
-
|
|
13
|
-
for req in required {
|
|
14
|
-
if !header_names.contains(&req.to_lowercase()) {
|
|
15
|
-
return Err(format!("Missing required header: {}", req));
|
|
16
|
-
}
|
|
17
|
-
}
|
|
18
|
-
Ok(())
|
|
19
|
-
}
|
|
20
|
-
|
|
21
|
-
/// Validate header format
|
|
22
|
-
pub fn validate_format(key: &str, value: &str, format: HeaderFormat) -> Result<(), String> {
|
|
23
|
-
match format {
|
|
24
|
-
HeaderFormat::Bearer => {
|
|
25
|
-
if !value.starts_with("Bearer ") {
|
|
26
|
-
return Err(format!("{}: must start with 'Bearer '", key));
|
|
27
|
-
}
|
|
28
|
-
Ok(())
|
|
29
|
-
}
|
|
30
|
-
HeaderFormat::Json => {
|
|
31
|
-
if !value.starts_with("application/json") {
|
|
32
|
-
return Err(format!("{}: must be 'application/json'", key));
|
|
33
|
-
}
|
|
34
|
-
Ok(())
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
}
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
/// Header validation formats
|
|
41
|
-
pub enum HeaderFormat {
|
|
42
|
-
/// Bearer token format
|
|
43
|
-
Bearer,
|
|
44
|
-
/// JSON content type
|
|
45
|
-
Json,
|
|
46
|
-
}
|
|
47
|
-
|
|
48
|
-
/// Helper for validating request bodies
|
|
49
|
-
pub struct BodyValidator;
|
|
50
|
-
|
|
51
|
-
impl BodyValidator {
|
|
52
|
-
/// Validate that required fields are present in a JSON object
|
|
53
|
-
pub fn validate_required_fields(body: &Value, required: &[&str]) -> Result<(), String> {
|
|
54
|
-
let obj = body
|
|
55
|
-
.as_object()
|
|
56
|
-
.ok_or_else(|| "Body must be a JSON object".to_string())?;
|
|
57
|
-
|
|
58
|
-
for field in required {
|
|
59
|
-
if !obj.contains_key(*field) {
|
|
60
|
-
return Err(format!("Missing required field: {}", field));
|
|
61
|
-
}
|
|
62
|
-
}
|
|
63
|
-
Ok(())
|
|
64
|
-
}
|
|
65
|
-
|
|
66
|
-
/// Validate field type
|
|
67
|
-
pub fn validate_field_type(body: &Value, field: &str, expected_type: FieldType) -> Result<(), String> {
|
|
68
|
-
let obj = body
|
|
69
|
-
.as_object()
|
|
70
|
-
.ok_or_else(|| "Body must be a JSON object".to_string())?;
|
|
71
|
-
|
|
72
|
-
let value = obj.get(field).ok_or_else(|| format!("Field not found: {}", field))?;
|
|
73
|
-
|
|
74
|
-
match expected_type {
|
|
75
|
-
FieldType::String => {
|
|
76
|
-
if !value.is_string() {
|
|
77
|
-
return Err(format!("{}: expected string", field));
|
|
78
|
-
}
|
|
79
|
-
}
|
|
80
|
-
FieldType::Number => {
|
|
81
|
-
if !value.is_number() {
|
|
82
|
-
return Err(format!("{}: expected number", field));
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
FieldType::Boolean => {
|
|
86
|
-
if !value.is_boolean() {
|
|
87
|
-
return Err(format!("{}: expected boolean", field));
|
|
88
|
-
}
|
|
89
|
-
}
|
|
90
|
-
FieldType::Object => {
|
|
91
|
-
if !value.is_object() {
|
|
92
|
-
return Err(format!("{}: expected object", field));
|
|
93
|
-
}
|
|
94
|
-
}
|
|
95
|
-
FieldType::Array => {
|
|
96
|
-
if !value.is_array() {
|
|
97
|
-
return Err(format!("{}: expected array", field));
|
|
98
|
-
}
|
|
99
|
-
}
|
|
100
|
-
}
|
|
101
|
-
Ok(())
|
|
102
|
-
}
|
|
103
|
-
}
|
|
104
|
-
|
|
105
|
-
/// Field types for validation
|
|
106
|
-
pub enum FieldType {
|
|
107
|
-
String,
|
|
108
|
-
Number,
|
|
109
|
-
Boolean,
|
|
110
|
-
Object,
|
|
111
|
-
Array,
|
|
112
|
-
}
|
|
113
|
-
|
|
114
|
-
#[cfg(test)]
|
|
115
|
-
mod tests {
|
|
116
|
-
use super::*;
|
|
117
|
-
|
|
118
|
-
#[test]
|
|
119
|
-
fn test_header_validation() {
|
|
120
|
-
let headers = vec![
|
|
121
|
-
("Content-Type".to_string(), "application/json".to_string()),
|
|
122
|
-
("Authorization".to_string(), "Bearer token123".to_string()),
|
|
123
|
-
];
|
|
124
|
-
|
|
125
|
-
assert!(HeaderValidator::validate_required(&headers, &["Content-Type"]).is_ok());
|
|
126
|
-
assert!(HeaderValidator::validate_required(&headers, &["Missing"]).is_err());
|
|
127
|
-
}
|
|
128
|
-
|
|
129
|
-
#[test]
|
|
130
|
-
fn test_body_validation() {
|
|
131
|
-
let body = serde_json::json!({
|
|
132
|
-
"name": "test",
|
|
133
|
-
"age": 25
|
|
134
|
-
});
|
|
135
|
-
|
|
136
|
-
assert!(BodyValidator::validate_required_fields(&body, &["name"]).is_ok());
|
|
137
|
-
assert!(BodyValidator::validate_required_fields(&body, &["missing"]).is_err());
|
|
138
|
-
}
|
|
139
|
-
|
|
140
|
-
#[test]
|
|
141
|
-
fn test_field_type_validation() {
|
|
142
|
-
let body = serde_json::json!({
|
|
143
|
-
"name": "test",
|
|
144
|
-
"age": 25
|
|
145
|
-
});
|
|
146
|
-
|
|
147
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::String).is_ok());
|
|
148
|
-
assert!(BodyValidator::validate_field_type(&body, "age", FieldType::Number).is_ok());
|
|
149
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Number).is_err());
|
|
150
|
-
}
|
|
151
|
-
|
|
152
|
-
#[test]
|
|
153
|
-
fn test_header_validator_case_insensitive() {
|
|
154
|
-
let headers = vec![
|
|
155
|
-
("content-type".to_string(), "application/json".to_string()),
|
|
156
|
-
("authorization".to_string(), "Bearer token123".to_string()),
|
|
157
|
-
];
|
|
158
|
-
|
|
159
|
-
assert!(HeaderValidator::validate_required(&headers, &["Content-Type"]).is_ok());
|
|
160
|
-
assert!(HeaderValidator::validate_required(&headers, &["AUTHORIZATION"]).is_ok());
|
|
161
|
-
assert!(HeaderValidator::validate_required(&headers, &["X-Custom"]).is_err());
|
|
162
|
-
}
|
|
163
|
-
|
|
164
|
-
#[test]
|
|
165
|
-
fn test_header_validator_multiple_required() {
|
|
166
|
-
let headers = vec![
|
|
167
|
-
("Content-Type".to_string(), "application/json".to_string()),
|
|
168
|
-
("Authorization".to_string(), "Bearer token".to_string()),
|
|
169
|
-
("X-Request-Id".to_string(), "123".to_string()),
|
|
170
|
-
];
|
|
171
|
-
|
|
172
|
-
assert!(
|
|
173
|
-
HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization", "X-Request-Id"]).is_ok()
|
|
174
|
-
);
|
|
175
|
-
assert!(HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization", "Missing"]).is_err());
|
|
176
|
-
}
|
|
177
|
-
|
|
178
|
-
#[test]
|
|
179
|
-
fn test_header_validator_empty_headers() {
|
|
180
|
-
let headers: Vec<(String, String)> = vec![];
|
|
181
|
-
|
|
182
|
-
assert!(HeaderValidator::validate_required(&headers, &[]).is_ok());
|
|
183
|
-
assert!(HeaderValidator::validate_required(&headers, &["Any"]).is_err());
|
|
184
|
-
}
|
|
185
|
-
|
|
186
|
-
#[test]
|
|
187
|
-
fn test_header_format_bearer() {
|
|
188
|
-
assert!(HeaderValidator::validate_format("Authorization", "Bearer token123", HeaderFormat::Bearer).is_ok());
|
|
189
|
-
assert!(HeaderValidator::validate_format("Authorization", "token123", HeaderFormat::Bearer).is_err());
|
|
190
|
-
assert!(HeaderValidator::validate_format("Authorization", "Basic dXNlcjpwYXNz", HeaderFormat::Bearer).is_err());
|
|
191
|
-
}
|
|
192
|
-
|
|
193
|
-
#[test]
|
|
194
|
-
fn test_header_format_json() {
|
|
195
|
-
assert!(HeaderValidator::validate_format("Content-Type", "application/json", HeaderFormat::Json).is_ok());
|
|
196
|
-
assert!(
|
|
197
|
-
HeaderValidator::validate_format("Content-Type", "application/json; charset=utf-8", HeaderFormat::Json)
|
|
198
|
-
.is_ok()
|
|
199
|
-
);
|
|
200
|
-
assert!(HeaderValidator::validate_format("Content-Type", "text/plain", HeaderFormat::Json).is_err());
|
|
201
|
-
}
|
|
202
|
-
|
|
203
|
-
#[test]
|
|
204
|
-
fn test_body_validator_required_fields_empty_body() {
|
|
205
|
-
let body = serde_json::json!({});
|
|
206
|
-
|
|
207
|
-
assert!(BodyValidator::validate_required_fields(&body, &[]).is_ok());
|
|
208
|
-
assert!(BodyValidator::validate_required_fields(&body, &["name"]).is_err());
|
|
209
|
-
}
|
|
210
|
-
|
|
211
|
-
#[test]
|
|
212
|
-
fn test_body_validator_required_fields_multiple() {
|
|
213
|
-
let body = serde_json::json!({
|
|
214
|
-
"name": "John",
|
|
215
|
-
"email": "john@example.com",
|
|
216
|
-
"age": 30
|
|
217
|
-
});
|
|
218
|
-
|
|
219
|
-
assert!(BodyValidator::validate_required_fields(&body, &["name", "email", "age"]).is_ok());
|
|
220
|
-
assert!(BodyValidator::validate_required_fields(&body, &["name", "missing"]).is_err());
|
|
221
|
-
}
|
|
222
|
-
|
|
223
|
-
#[test]
|
|
224
|
-
fn test_body_validator_not_json_object() {
|
|
225
|
-
let body = serde_json::json!([1, 2, 3]);
|
|
226
|
-
|
|
227
|
-
assert!(BodyValidator::validate_required_fields(&body, &["field"]).is_err());
|
|
228
|
-
}
|
|
229
|
-
|
|
230
|
-
#[test]
|
|
231
|
-
fn test_body_validator_field_type_string() {
|
|
232
|
-
let body = serde_json::json!({
|
|
233
|
-
"name": "test",
|
|
234
|
-
"id": 123
|
|
235
|
-
});
|
|
236
|
-
|
|
237
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::String).is_ok());
|
|
238
|
-
assert!(BodyValidator::validate_field_type(&body, "id", FieldType::String).is_err());
|
|
239
|
-
}
|
|
240
|
-
|
|
241
|
-
#[test]
|
|
242
|
-
fn test_body_validator_field_type_number() {
|
|
243
|
-
let body = serde_json::json!({
|
|
244
|
-
"age": 25,
|
|
245
|
-
"name": "test"
|
|
246
|
-
});
|
|
247
|
-
|
|
248
|
-
assert!(BodyValidator::validate_field_type(&body, "age", FieldType::Number).is_ok());
|
|
249
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Number).is_err());
|
|
250
|
-
}
|
|
251
|
-
|
|
252
|
-
#[test]
|
|
253
|
-
fn test_body_validator_field_type_boolean() {
|
|
254
|
-
let body = serde_json::json!({
|
|
255
|
-
"active": true,
|
|
256
|
-
"name": "test"
|
|
257
|
-
});
|
|
258
|
-
|
|
259
|
-
assert!(BodyValidator::validate_field_type(&body, "active", FieldType::Boolean).is_ok());
|
|
260
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Boolean).is_err());
|
|
261
|
-
}
|
|
262
|
-
|
|
263
|
-
#[test]
|
|
264
|
-
fn test_body_validator_field_type_object() {
|
|
265
|
-
let body = serde_json::json!({
|
|
266
|
-
"metadata": { "key": "value" },
|
|
267
|
-
"name": "test"
|
|
268
|
-
});
|
|
269
|
-
|
|
270
|
-
assert!(BodyValidator::validate_field_type(&body, "metadata", FieldType::Object).is_ok());
|
|
271
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Object).is_err());
|
|
272
|
-
}
|
|
273
|
-
|
|
274
|
-
#[test]
|
|
275
|
-
fn test_body_validator_field_type_array() {
|
|
276
|
-
let body = serde_json::json!({
|
|
277
|
-
"items": [1, 2, 3],
|
|
278
|
-
"name": "test"
|
|
279
|
-
});
|
|
280
|
-
|
|
281
|
-
assert!(BodyValidator::validate_field_type(&body, "items", FieldType::Array).is_ok());
|
|
282
|
-
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Array).is_err());
|
|
283
|
-
}
|
|
284
|
-
|
|
285
|
-
#[test]
|
|
286
|
-
fn test_body_validator_field_not_found() {
|
|
287
|
-
let body = serde_json::json!({
|
|
288
|
-
"name": "test"
|
|
289
|
-
});
|
|
290
|
-
|
|
291
|
-
assert!(BodyValidator::validate_field_type(&body, "missing", FieldType::String).is_err());
|
|
292
|
-
}
|
|
293
|
-
|
|
294
|
-
#[test]
|
|
295
|
-
fn test_body_validator_body_not_object() {
|
|
296
|
-
let body = serde_json::json!("string");
|
|
297
|
-
|
|
298
|
-
assert!(BodyValidator::validate_field_type(&body, "field", FieldType::String).is_err());
|
|
299
|
-
}
|
|
300
|
-
|
|
301
|
-
#[test]
|
|
302
|
-
fn test_body_validator_null_field() {
|
|
303
|
-
let body = serde_json::json!({
|
|
304
|
-
"value": null
|
|
305
|
-
});
|
|
306
|
-
|
|
307
|
-
assert!(BodyValidator::validate_field_type(&body, "value", FieldType::String).is_err());
|
|
308
|
-
}
|
|
309
|
-
|
|
310
|
-
#[test]
|
|
311
|
-
fn test_complex_validation_flow() {
|
|
312
|
-
let headers = vec![
|
|
313
|
-
("Content-Type".to_string(), "application/json".to_string()),
|
|
314
|
-
("Authorization".to_string(), "Bearer token".to_string()),
|
|
315
|
-
];
|
|
316
|
-
|
|
317
|
-
let body = serde_json::json!({
|
|
318
|
-
"username": "john_doe",
|
|
319
|
-
"password": "secret123",
|
|
320
|
-
"roles": ["admin", "user"],
|
|
321
|
-
"preferences": {
|
|
322
|
-
"theme": "dark"
|
|
323
|
-
}
|
|
324
|
-
});
|
|
325
|
-
|
|
326
|
-
assert!(HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization"]).is_ok());
|
|
327
|
-
|
|
328
|
-
assert!(BodyValidator::validate_required_fields(&body, &["username", "password"]).is_ok());
|
|
329
|
-
|
|
330
|
-
assert!(BodyValidator::validate_field_type(&body, "username", FieldType::String).is_ok());
|
|
331
|
-
assert!(BodyValidator::validate_field_type(&body, "roles", FieldType::Array).is_ok());
|
|
332
|
-
assert!(BodyValidator::validate_field_type(&body, "preferences", FieldType::Object).is_ok());
|
|
333
|
-
}
|
|
334
|
-
|
|
335
|
-
#[test]
|
|
336
|
-
fn test_field_type_all_variants() {
|
|
337
|
-
let body = serde_json::json!({
|
|
338
|
-
"string_field": "text",
|
|
339
|
-
"number_field": 42,
|
|
340
|
-
"boolean_field": true,
|
|
341
|
-
"object_field": { "nested": "value" },
|
|
342
|
-
"array_field": [1, 2, 3]
|
|
343
|
-
});
|
|
344
|
-
|
|
345
|
-
assert!(BodyValidator::validate_field_type(&body, "string_field", FieldType::String).is_ok());
|
|
346
|
-
assert!(BodyValidator::validate_field_type(&body, "number_field", FieldType::Number).is_ok());
|
|
347
|
-
assert!(BodyValidator::validate_field_type(&body, "boolean_field", FieldType::Boolean).is_ok());
|
|
348
|
-
assert!(BodyValidator::validate_field_type(&body, "object_field", FieldType::Object).is_ok());
|
|
349
|
-
assert!(BodyValidator::validate_field_type(&body, "array_field", FieldType::Array).is_ok());
|
|
350
|
-
}
|
|
351
|
-
}
|
|
1
|
+
//! Shared validation utilities
|
|
2
|
+
|
|
3
|
+
use serde_json::Value;
|
|
4
|
+
|
|
5
|
+
/// Helper for validating request headers
|
|
6
|
+
pub struct HeaderValidator;
|
|
7
|
+
|
|
8
|
+
impl HeaderValidator {
|
|
9
|
+
/// Validate that required headers are present
|
|
10
|
+
pub fn validate_required(headers: &[(String, String)], required: &[&str]) -> Result<(), String> {
|
|
11
|
+
let header_names: std::collections::HashSet<_> = headers.iter().map(|(k, _)| k.to_lowercase()).collect();
|
|
12
|
+
|
|
13
|
+
for req in required {
|
|
14
|
+
if !header_names.contains(&req.to_lowercase()) {
|
|
15
|
+
return Err(format!("Missing required header: {}", req));
|
|
16
|
+
}
|
|
17
|
+
}
|
|
18
|
+
Ok(())
|
|
19
|
+
}
|
|
20
|
+
|
|
21
|
+
/// Validate header format
|
|
22
|
+
pub fn validate_format(key: &str, value: &str, format: HeaderFormat) -> Result<(), String> {
|
|
23
|
+
match format {
|
|
24
|
+
HeaderFormat::Bearer => {
|
|
25
|
+
if !value.starts_with("Bearer ") {
|
|
26
|
+
return Err(format!("{}: must start with 'Bearer '", key));
|
|
27
|
+
}
|
|
28
|
+
Ok(())
|
|
29
|
+
}
|
|
30
|
+
HeaderFormat::Json => {
|
|
31
|
+
if !value.starts_with("application/json") {
|
|
32
|
+
return Err(format!("{}: must be 'application/json'", key));
|
|
33
|
+
}
|
|
34
|
+
Ok(())
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
}
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
/// Header validation formats
|
|
41
|
+
pub enum HeaderFormat {
|
|
42
|
+
/// Bearer token format
|
|
43
|
+
Bearer,
|
|
44
|
+
/// JSON content type
|
|
45
|
+
Json,
|
|
46
|
+
}
|
|
47
|
+
|
|
48
|
+
/// Helper for validating request bodies
|
|
49
|
+
pub struct BodyValidator;
|
|
50
|
+
|
|
51
|
+
impl BodyValidator {
|
|
52
|
+
/// Validate that required fields are present in a JSON object
|
|
53
|
+
pub fn validate_required_fields(body: &Value, required: &[&str]) -> Result<(), String> {
|
|
54
|
+
let obj = body
|
|
55
|
+
.as_object()
|
|
56
|
+
.ok_or_else(|| "Body must be a JSON object".to_string())?;
|
|
57
|
+
|
|
58
|
+
for field in required {
|
|
59
|
+
if !obj.contains_key(*field) {
|
|
60
|
+
return Err(format!("Missing required field: {}", field));
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
Ok(())
|
|
64
|
+
}
|
|
65
|
+
|
|
66
|
+
/// Validate field type
|
|
67
|
+
pub fn validate_field_type(body: &Value, field: &str, expected_type: FieldType) -> Result<(), String> {
|
|
68
|
+
let obj = body
|
|
69
|
+
.as_object()
|
|
70
|
+
.ok_or_else(|| "Body must be a JSON object".to_string())?;
|
|
71
|
+
|
|
72
|
+
let value = obj.get(field).ok_or_else(|| format!("Field not found: {}", field))?;
|
|
73
|
+
|
|
74
|
+
match expected_type {
|
|
75
|
+
FieldType::String => {
|
|
76
|
+
if !value.is_string() {
|
|
77
|
+
return Err(format!("{}: expected string", field));
|
|
78
|
+
}
|
|
79
|
+
}
|
|
80
|
+
FieldType::Number => {
|
|
81
|
+
if !value.is_number() {
|
|
82
|
+
return Err(format!("{}: expected number", field));
|
|
83
|
+
}
|
|
84
|
+
}
|
|
85
|
+
FieldType::Boolean => {
|
|
86
|
+
if !value.is_boolean() {
|
|
87
|
+
return Err(format!("{}: expected boolean", field));
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
FieldType::Object => {
|
|
91
|
+
if !value.is_object() {
|
|
92
|
+
return Err(format!("{}: expected object", field));
|
|
93
|
+
}
|
|
94
|
+
}
|
|
95
|
+
FieldType::Array => {
|
|
96
|
+
if !value.is_array() {
|
|
97
|
+
return Err(format!("{}: expected array", field));
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
}
|
|
101
|
+
Ok(())
|
|
102
|
+
}
|
|
103
|
+
}
|
|
104
|
+
|
|
105
|
+
/// Field types for validation
|
|
106
|
+
pub enum FieldType {
|
|
107
|
+
String,
|
|
108
|
+
Number,
|
|
109
|
+
Boolean,
|
|
110
|
+
Object,
|
|
111
|
+
Array,
|
|
112
|
+
}
|
|
113
|
+
|
|
114
|
+
#[cfg(test)]
|
|
115
|
+
mod tests {
|
|
116
|
+
use super::*;
|
|
117
|
+
|
|
118
|
+
#[test]
|
|
119
|
+
fn test_header_validation() {
|
|
120
|
+
let headers = vec![
|
|
121
|
+
("Content-Type".to_string(), "application/json".to_string()),
|
|
122
|
+
("Authorization".to_string(), "Bearer token123".to_string()),
|
|
123
|
+
];
|
|
124
|
+
|
|
125
|
+
assert!(HeaderValidator::validate_required(&headers, &["Content-Type"]).is_ok());
|
|
126
|
+
assert!(HeaderValidator::validate_required(&headers, &["Missing"]).is_err());
|
|
127
|
+
}
|
|
128
|
+
|
|
129
|
+
#[test]
|
|
130
|
+
fn test_body_validation() {
|
|
131
|
+
let body = serde_json::json!({
|
|
132
|
+
"name": "test",
|
|
133
|
+
"age": 25
|
|
134
|
+
});
|
|
135
|
+
|
|
136
|
+
assert!(BodyValidator::validate_required_fields(&body, &["name"]).is_ok());
|
|
137
|
+
assert!(BodyValidator::validate_required_fields(&body, &["missing"]).is_err());
|
|
138
|
+
}
|
|
139
|
+
|
|
140
|
+
#[test]
|
|
141
|
+
fn test_field_type_validation() {
|
|
142
|
+
let body = serde_json::json!({
|
|
143
|
+
"name": "test",
|
|
144
|
+
"age": 25
|
|
145
|
+
});
|
|
146
|
+
|
|
147
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::String).is_ok());
|
|
148
|
+
assert!(BodyValidator::validate_field_type(&body, "age", FieldType::Number).is_ok());
|
|
149
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Number).is_err());
|
|
150
|
+
}
|
|
151
|
+
|
|
152
|
+
#[test]
|
|
153
|
+
fn test_header_validator_case_insensitive() {
|
|
154
|
+
let headers = vec![
|
|
155
|
+
("content-type".to_string(), "application/json".to_string()),
|
|
156
|
+
("authorization".to_string(), "Bearer token123".to_string()),
|
|
157
|
+
];
|
|
158
|
+
|
|
159
|
+
assert!(HeaderValidator::validate_required(&headers, &["Content-Type"]).is_ok());
|
|
160
|
+
assert!(HeaderValidator::validate_required(&headers, &["AUTHORIZATION"]).is_ok());
|
|
161
|
+
assert!(HeaderValidator::validate_required(&headers, &["X-Custom"]).is_err());
|
|
162
|
+
}
|
|
163
|
+
|
|
164
|
+
#[test]
|
|
165
|
+
fn test_header_validator_multiple_required() {
|
|
166
|
+
let headers = vec![
|
|
167
|
+
("Content-Type".to_string(), "application/json".to_string()),
|
|
168
|
+
("Authorization".to_string(), "Bearer token".to_string()),
|
|
169
|
+
("X-Request-Id".to_string(), "123".to_string()),
|
|
170
|
+
];
|
|
171
|
+
|
|
172
|
+
assert!(
|
|
173
|
+
HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization", "X-Request-Id"]).is_ok()
|
|
174
|
+
);
|
|
175
|
+
assert!(HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization", "Missing"]).is_err());
|
|
176
|
+
}
|
|
177
|
+
|
|
178
|
+
#[test]
|
|
179
|
+
fn test_header_validator_empty_headers() {
|
|
180
|
+
let headers: Vec<(String, String)> = vec![];
|
|
181
|
+
|
|
182
|
+
assert!(HeaderValidator::validate_required(&headers, &[]).is_ok());
|
|
183
|
+
assert!(HeaderValidator::validate_required(&headers, &["Any"]).is_err());
|
|
184
|
+
}
|
|
185
|
+
|
|
186
|
+
#[test]
|
|
187
|
+
fn test_header_format_bearer() {
|
|
188
|
+
assert!(HeaderValidator::validate_format("Authorization", "Bearer token123", HeaderFormat::Bearer).is_ok());
|
|
189
|
+
assert!(HeaderValidator::validate_format("Authorization", "token123", HeaderFormat::Bearer).is_err());
|
|
190
|
+
assert!(HeaderValidator::validate_format("Authorization", "Basic dXNlcjpwYXNz", HeaderFormat::Bearer).is_err());
|
|
191
|
+
}
|
|
192
|
+
|
|
193
|
+
#[test]
|
|
194
|
+
fn test_header_format_json() {
|
|
195
|
+
assert!(HeaderValidator::validate_format("Content-Type", "application/json", HeaderFormat::Json).is_ok());
|
|
196
|
+
assert!(
|
|
197
|
+
HeaderValidator::validate_format("Content-Type", "application/json; charset=utf-8", HeaderFormat::Json)
|
|
198
|
+
.is_ok()
|
|
199
|
+
);
|
|
200
|
+
assert!(HeaderValidator::validate_format("Content-Type", "text/plain", HeaderFormat::Json).is_err());
|
|
201
|
+
}
|
|
202
|
+
|
|
203
|
+
#[test]
|
|
204
|
+
fn test_body_validator_required_fields_empty_body() {
|
|
205
|
+
let body = serde_json::json!({});
|
|
206
|
+
|
|
207
|
+
assert!(BodyValidator::validate_required_fields(&body, &[]).is_ok());
|
|
208
|
+
assert!(BodyValidator::validate_required_fields(&body, &["name"]).is_err());
|
|
209
|
+
}
|
|
210
|
+
|
|
211
|
+
#[test]
|
|
212
|
+
fn test_body_validator_required_fields_multiple() {
|
|
213
|
+
let body = serde_json::json!({
|
|
214
|
+
"name": "John",
|
|
215
|
+
"email": "john@example.com",
|
|
216
|
+
"age": 30
|
|
217
|
+
});
|
|
218
|
+
|
|
219
|
+
assert!(BodyValidator::validate_required_fields(&body, &["name", "email", "age"]).is_ok());
|
|
220
|
+
assert!(BodyValidator::validate_required_fields(&body, &["name", "missing"]).is_err());
|
|
221
|
+
}
|
|
222
|
+
|
|
223
|
+
#[test]
|
|
224
|
+
fn test_body_validator_not_json_object() {
|
|
225
|
+
let body = serde_json::json!([1, 2, 3]);
|
|
226
|
+
|
|
227
|
+
assert!(BodyValidator::validate_required_fields(&body, &["field"]).is_err());
|
|
228
|
+
}
|
|
229
|
+
|
|
230
|
+
#[test]
|
|
231
|
+
fn test_body_validator_field_type_string() {
|
|
232
|
+
let body = serde_json::json!({
|
|
233
|
+
"name": "test",
|
|
234
|
+
"id": 123
|
|
235
|
+
});
|
|
236
|
+
|
|
237
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::String).is_ok());
|
|
238
|
+
assert!(BodyValidator::validate_field_type(&body, "id", FieldType::String).is_err());
|
|
239
|
+
}
|
|
240
|
+
|
|
241
|
+
#[test]
|
|
242
|
+
fn test_body_validator_field_type_number() {
|
|
243
|
+
let body = serde_json::json!({
|
|
244
|
+
"age": 25,
|
|
245
|
+
"name": "test"
|
|
246
|
+
});
|
|
247
|
+
|
|
248
|
+
assert!(BodyValidator::validate_field_type(&body, "age", FieldType::Number).is_ok());
|
|
249
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Number).is_err());
|
|
250
|
+
}
|
|
251
|
+
|
|
252
|
+
#[test]
|
|
253
|
+
fn test_body_validator_field_type_boolean() {
|
|
254
|
+
let body = serde_json::json!({
|
|
255
|
+
"active": true,
|
|
256
|
+
"name": "test"
|
|
257
|
+
});
|
|
258
|
+
|
|
259
|
+
assert!(BodyValidator::validate_field_type(&body, "active", FieldType::Boolean).is_ok());
|
|
260
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Boolean).is_err());
|
|
261
|
+
}
|
|
262
|
+
|
|
263
|
+
#[test]
|
|
264
|
+
fn test_body_validator_field_type_object() {
|
|
265
|
+
let body = serde_json::json!({
|
|
266
|
+
"metadata": { "key": "value" },
|
|
267
|
+
"name": "test"
|
|
268
|
+
});
|
|
269
|
+
|
|
270
|
+
assert!(BodyValidator::validate_field_type(&body, "metadata", FieldType::Object).is_ok());
|
|
271
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Object).is_err());
|
|
272
|
+
}
|
|
273
|
+
|
|
274
|
+
#[test]
|
|
275
|
+
fn test_body_validator_field_type_array() {
|
|
276
|
+
let body = serde_json::json!({
|
|
277
|
+
"items": [1, 2, 3],
|
|
278
|
+
"name": "test"
|
|
279
|
+
});
|
|
280
|
+
|
|
281
|
+
assert!(BodyValidator::validate_field_type(&body, "items", FieldType::Array).is_ok());
|
|
282
|
+
assert!(BodyValidator::validate_field_type(&body, "name", FieldType::Array).is_err());
|
|
283
|
+
}
|
|
284
|
+
|
|
285
|
+
#[test]
|
|
286
|
+
fn test_body_validator_field_not_found() {
|
|
287
|
+
let body = serde_json::json!({
|
|
288
|
+
"name": "test"
|
|
289
|
+
});
|
|
290
|
+
|
|
291
|
+
assert!(BodyValidator::validate_field_type(&body, "missing", FieldType::String).is_err());
|
|
292
|
+
}
|
|
293
|
+
|
|
294
|
+
#[test]
|
|
295
|
+
fn test_body_validator_body_not_object() {
|
|
296
|
+
let body = serde_json::json!("string");
|
|
297
|
+
|
|
298
|
+
assert!(BodyValidator::validate_field_type(&body, "field", FieldType::String).is_err());
|
|
299
|
+
}
|
|
300
|
+
|
|
301
|
+
#[test]
|
|
302
|
+
fn test_body_validator_null_field() {
|
|
303
|
+
let body = serde_json::json!({
|
|
304
|
+
"value": null
|
|
305
|
+
});
|
|
306
|
+
|
|
307
|
+
assert!(BodyValidator::validate_field_type(&body, "value", FieldType::String).is_err());
|
|
308
|
+
}
|
|
309
|
+
|
|
310
|
+
#[test]
|
|
311
|
+
fn test_complex_validation_flow() {
|
|
312
|
+
let headers = vec![
|
|
313
|
+
("Content-Type".to_string(), "application/json".to_string()),
|
|
314
|
+
("Authorization".to_string(), "Bearer token".to_string()),
|
|
315
|
+
];
|
|
316
|
+
|
|
317
|
+
let body = serde_json::json!({
|
|
318
|
+
"username": "john_doe",
|
|
319
|
+
"password": "secret123",
|
|
320
|
+
"roles": ["admin", "user"],
|
|
321
|
+
"preferences": {
|
|
322
|
+
"theme": "dark"
|
|
323
|
+
}
|
|
324
|
+
});
|
|
325
|
+
|
|
326
|
+
assert!(HeaderValidator::validate_required(&headers, &["Content-Type", "Authorization"]).is_ok());
|
|
327
|
+
|
|
328
|
+
assert!(BodyValidator::validate_required_fields(&body, &["username", "password"]).is_ok());
|
|
329
|
+
|
|
330
|
+
assert!(BodyValidator::validate_field_type(&body, "username", FieldType::String).is_ok());
|
|
331
|
+
assert!(BodyValidator::validate_field_type(&body, "roles", FieldType::Array).is_ok());
|
|
332
|
+
assert!(BodyValidator::validate_field_type(&body, "preferences", FieldType::Object).is_ok());
|
|
333
|
+
}
|
|
334
|
+
|
|
335
|
+
#[test]
|
|
336
|
+
fn test_field_type_all_variants() {
|
|
337
|
+
let body = serde_json::json!({
|
|
338
|
+
"string_field": "text",
|
|
339
|
+
"number_field": 42,
|
|
340
|
+
"boolean_field": true,
|
|
341
|
+
"object_field": { "nested": "value" },
|
|
342
|
+
"array_field": [1, 2, 3]
|
|
343
|
+
});
|
|
344
|
+
|
|
345
|
+
assert!(BodyValidator::validate_field_type(&body, "string_field", FieldType::String).is_ok());
|
|
346
|
+
assert!(BodyValidator::validate_field_type(&body, "number_field", FieldType::Number).is_ok());
|
|
347
|
+
assert!(BodyValidator::validate_field_type(&body, "boolean_field", FieldType::Boolean).is_ok());
|
|
348
|
+
assert!(BodyValidator::validate_field_type(&body, "object_field", FieldType::Object).is_ok());
|
|
349
|
+
assert!(BodyValidator::validate_field_type(&body, "array_field", FieldType::Array).is_ok());
|
|
350
|
+
}
|
|
351
|
+
}
|