rama 0.3.0

modular service framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

use super::utils;
use rama::{
    Layer,
    http::service::web::response::Json,
    http::{BodyExtractExt, Request, server::HttpServer},
    net::address::ProxyAddress,
    rt::Executor,
    service::service_fn,
    tcp::server::TcpListener,
    tls::KeyLogIntent,
    tls::rustls::server::TlsAcceptorLayer,
    tls::server::{SelfSignedData, TlsServerConfig},
};
use serde_json::{Value, json};

#[tokio::test]
#[ignore]
async fn test_http_mitm_proxy() {
    utils::init_tracing();

    tokio::spawn(async {
        HttpServer::auto(Executor::default())
            .listen(
                "127.0.0.1:63005",
                service_fn(async |req: Request| {
                    Ok(Json(json!({
                        "method": req.method().as_str(),
                        "path": req.uri().path_or_root(),
                    })))
                }),
            )
            .await
            .unwrap();
    });

    let data = TlsServerConfig::new()
        .try_with_self_signed(SelfSignedData {
            organisation_name: Some("Example Server Acceptor".to_owned()),
            ..Default::default()
        })
        .expect("self-signed")
        .with_alpn_http_auto()
        .with_keylog(KeyLogIntent::Environment);

    let executor = Executor::default();

    let tcp_service = TlsAcceptorLayer::new(data).into_layer(HttpServer::auto(executor).service(
        service_fn(async |req: Request| {
            Ok(Json(json!({
                "method": req.method().as_str(),
                "path": req.uri().path_or_root(),
            })))
        }),
    ));

    tokio::spawn(async {
        TcpListener::bind_address("127.0.0.1:63006", Executor::default())
            .await
            .unwrap_or_else(|e| panic!("bind TCP Listener: secure web service: {e}"))
            .serve(tcp_service)
            .await;
    });

    for features in ["rustls,aws-lc", "rustls,ring", "rustls,aws-lc,ring"] {
        let runner = utils::ExampleRunner::interactive("http_mitm_proxy_rustls", Some(features));

        // test http request proxy flow
        let result = runner
            .get("http://127.0.0.1:63005/foo/bar")
            .extension(ProxyAddress::try_from("http://john:secret@127.0.0.1:62019").unwrap())
            .send()
            .await
            .unwrap()
            .try_into_json::<Value>()
            .await
            .unwrap();
        let expected_value = json!({"method":"GET","path":"/foo/bar"});
        assert_eq!(expected_value, result);

        // test https request proxy flow
        let result = runner
            .get("https://127.0.0.1:63006/foo/bar")
            .extension(ProxyAddress::try_from("http://john:secret@127.0.0.1:62019").unwrap())
            .send()
            .await
            .unwrap()
            .try_into_json::<Value>()
            .await
            .unwrap();
        let expected_value = json!({"method":"GET","path":"/foo/bar"});
        assert_eq!(expected_value, result);
    }
}