doido-controller 0.0.13

Action Controller + routing + Tower middleware for Doido: handlers, Context, responses, filters, routes! DSL, sessions, and middleware stacks.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use doido_controller::flash::Flash;
use doido_controller::session::CookieSessionStore;

#[test]
fn flash_round_trips_to_the_next_request() {
    let store = CookieSessionStore::new(b"secret".to_vec());
    let mut flash = Flash::new();
    flash.set("notice", "Saved!");
    flash.set("alert", "Careful");

    // The response writes a signed flash cookie; the next request reads it.
    let cookie = flash.to_cookie(&store);
    let next = Flash::from_cookie(&store, &cookie);
    assert_eq!(next.get("notice"), Some("Saved!"));
    assert_eq!(next.get("alert"), Some("Careful"));
}

#[test]
fn flash_does_not_persist_without_the_cookie() {
    let store = CookieSessionStore::new(b"secret".to_vec());
    // The request after next carries no flash cookie.
    let after = Flash::from_cookie(&store, "");
    assert!(
        after.is_empty(),
        "a flash lives for exactly one following request"
    );
}

#[test]
fn tampered_or_wrong_secret_flash_is_dropped() {
    let signer = CookieSessionStore::new(b"secret".to_vec());
    let attacker = CookieSessionStore::new(b"other".to_vec());
    let mut flash = Flash::new();
    flash.set("notice", "x");
    let cookie = flash.to_cookie(&signer);
    assert!(
        Flash::from_cookie(&attacker, &cookie).is_empty(),
        "an unverified flash cookie is ignored"
    );
}