ohkami 0.24.9

A performant, declarative, and runtime-flexible web framework for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

mod basicauth;
pub use basicauth::BasicAuth;

mod cors;
pub use cors::Cors;

mod csrf;
pub use csrf::Csrf;

mod jwt;
pub use jwt::{Jwt, JwtToken};

mod context;
pub use context::Context;

pub mod enamel;
pub use enamel::Enamel;

#[cfg(feature = "__rt_native__")]
mod timeout;
#[cfg(feature = "__rt_native__")]
pub use timeout::Timeout;

fn validate_origin(origin: &str) -> Result<(), &'static str> {
    let Some(("http" | "https", rest)) = origin.split_once("://") else {
        return Err("invalid origin: 'http' or 'https' scheme is required");
    };
    let (host, port) = rest
        .split_once(':')
        .map_or((rest, None), |(h, p)| (h, Some(p)));
    if port.is_some_and(|p| !p.chars().all(|c| c.is_ascii_digit())) {
        return Err("invalid origin: port must be a number");
    }
    if !host.starts_with(|c: char| c.is_ascii_alphabetic()) {
        return Err("invalid origin: host must start with an alphabetic character");
    }
    if !host.split('.').all(|part| {
        !part.is_empty()
            && part
                .chars()
                .all(|c| matches!(c, 'a'..='z' | 'A'..='Z' | '0'..='9' | '-' | '_'))
    }) {
        if host.contains(['/', '?', '#']) {
            // helpful error message for common mistake
            return Err("invalid origin: path, query and fragment are not allowed");
        } else {
            return Err("invalid origin: invalid host");
        }
    }
    Ok(())
}