http-handle 0.0.5

A fast and lightweight Rust library for handling HTTP requests and responses.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

// SPDX-License-Identifier: AGPL-3.0-only
// Copyright (c) 2023 - 2026 HTTP Handle

//! `enterprise` feature: RBAC adapter + per-request enforcement hook.
//!
//! Run: `cargo run --example enterprise --features enterprise`

#[cfg(feature = "enterprise")]
#[path = "support.rs"]
mod support;

#[cfg(feature = "enterprise")]
fn main() {
    use http_handle::enterprise::{
        AuthorizationHook, RbacAdapter,
        enforce_http_request_authorization,
    };
    use http_handle::request::Request;
    use std::collections::HashMap;

    support::header("http-handle -- enterprise");

    let auth = AuthorizationHook::new().with_engine(
        RbacAdapter::default()
            .grant_role("service-a", "reader")
            .grant_role("service-b", "writer")
            .grant_permission("reader", "/health", "GET")
            .grant_permission("writer", "/health", "GET")
            .grant_permission("writer", "/admin", "POST"),
    );

    support::task_with_output(
        "Authorise GET /health for the reader role",
        || {
            let request = Request {
                method: "GET".into(),
                path: "/health".into(),
                version: "HTTP/1.1".into(),
                headers: Vec::new(),
            };
            let outcome = enforce_http_request_authorization(
                &auth,
                &request,
                "service-a",
                HashMap::new(),
            );
            vec![format!(
                "service-a GET /health -> {:?}",
                outcome.map(|_| "allowed")
            )]
        },
    );

    support::task_with_output(
        "Reject POST /admin for the reader role",
        || {
            let request = Request {
                method: "POST".into(),
                path: "/admin".into(),
                version: "HTTP/1.1".into(),
                headers: Vec::new(),
            };
            let outcome = enforce_http_request_authorization(
                &auth,
                &request,
                "service-a",
                HashMap::new(),
            );
            vec![format!(
                "service-a POST /admin -> err? {}",
                outcome.is_err()
            )]
        },
    );

    support::task_with_output(
        "Allow POST /admin for the writer role",
        || {
            let request = Request {
                method: "POST".into(),
                path: "/admin".into(),
                version: "HTTP/1.1".into(),
                headers: Vec::new(),
            };
            let outcome = enforce_http_request_authorization(
                &auth,
                &request,
                "service-b",
                HashMap::new(),
            );
            vec![format!(
                "service-b POST /admin -> {:?}",
                outcome.map(|_| "allowed")
            )]
        },
    );

    support::summary(3);
}

#[cfg(not(feature = "enterprise"))]
fn main() {
    eprintln!(
        "Enable the 'enterprise' feature: cargo run --example enterprise --features enterprise"
    );
}