http-smtp-rele 0.15.0

Minimal, secure HTTP-to-SMTP submission relay
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

//! HTTP API router and middleware wiring.

use std::sync::Arc;
use std::time::Duration;

use axum::{
    extract::DefaultBodyLimit,
    http::HeaderValue,
    middleware::{self, Next},
    response::Response,
    routing::get,
    Router,
};

use tower_http::{timeout::TimeoutLayer, trace::TraceLayer};

use crate::{AppState, RequestId};

pub mod health;
pub mod keys;
pub mod metrics_handler;
pub mod send;
pub mod send_bulk;
pub mod submissions;

// ---------------------------------------------------------------------------
// X-Request-Id middleware (RFC 035)
// ---------------------------------------------------------------------------

/// Axum middleware that generates a `RequestId` (req_ + ULID) per request,
/// stores it as a request Extension for handlers, and injects `X-Request-Id`
/// into the response header (RFC 035, RFC 036).
async fn request_id_layer(mut req: axum::http::Request<axum::body::Body>, next: Next) -> Response {
    let request_id = RequestId::new();
    let header_val = request_id.to_string();
    req.extensions_mut().insert(request_id);
    let mut resp = next.run(req).await;
    if let Ok(val) = HeaderValue::from_str(&header_val) {
        resp.headers_mut().insert("x-request-id", val);
    }
    resp
}

// ---------------------------------------------------------------------------
// Router construction
// ---------------------------------------------------------------------------

/// Axum extractor that reads `RequestId` set by `request_id_layer`, or generates a
/// new one as a fallback (ensures tests that bypass the middleware still work).
pub struct ExtractRequestId(pub crate::RequestId);

impl<S: Send + Sync> axum::extract::FromRequestParts<S> for ExtractRequestId {
    type Rejection = std::convert::Infallible;

    fn from_request_parts(
        parts: &mut axum::http::request::Parts,
        _state: &S,
    ) -> impl std::future::Future<Output = Result<Self, Self::Rejection>> + Send {
        let id = parts
            .extensions
            .get::<crate::RequestId>()
            .cloned()
            .unwrap_or_else(crate::RequestId::new);
        async move { Ok(ExtractRequestId(id)) }
    }
}

/// Build the Axum application router with all middleware layers applied.
pub fn build_router(state: Arc<AppState>) -> Router {
    let cfg = state.config();
    let max_body     = cfg.server.max_request_body_bytes;
    let timeout_secs = cfg.server.request_timeout_seconds;
    let concurrency  = cfg.server.concurrency_limit;

    let mut router = Router::new()
        .route("/healthz", get(health::healthz))
        .route("/readyz",  get(health::readyz))
        .route("/metrics", get(metrics_handler::metrics_handler_no_ci))
        .route("/v1/submissions/{request_id}", get(submissions::get_submission_status))
        .route("/v1/keys/self", get(keys::get_key_self))
        .route("/v1/send", axum::routing::post(send::send_mail))
        // RFC 823: bulk send is disabled by default (allow_bulk_send = false)
        .route("/v1/send-bulk", if cfg.mail.allow_bulk_send {
            axum::routing::post(send_bulk::send_bulk)
        } else {
            axum::routing::post(|| async { axum::http::StatusCode::NOT_FOUND })
        })
        .layer(middleware::from_fn(request_id_layer))
        .layer(TraceLayer::new_for_http())
        .layer(TimeoutLayer::with_status_code(
            axum::http::StatusCode::REQUEST_TIMEOUT,
            Duration::from_secs(timeout_secs),
        ))
        .layer(DefaultBodyLimit::max(max_body))
        .with_state(state);

    // RFC 205: optional concurrency cap (outermost layer — applied first)
    if concurrency > 0 {
        router = router.layer(tower::limit::ConcurrencyLimitLayer::new(concurrency));
    }

    router
}