runique 2.1.17

A Django-inspired web framework for Rust with ORM, templates, and comprehensive security middleware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

//! Middleware/security tracing — one field per security middleware.
use tracing::Level;

/// Middleware/security tracing.
#[derive(Debug, Clone, Default)]
pub struct MiddlewareTracing {
    /// Detects a `csrf_token` in a GET URL (silent cleanup) and CSRF rejections.
    pub csrf: Option<Level>,
    /// CSP policy build + nonce injection events.
    pub csp: Option<Level>,
    /// CORS middleware decisions (when enabled).
    pub cors: Option<Level>,
    /// Rate limiter: requests blocked (ip, retry_after).
    pub rate_limit: Option<Level>,
    /// Host header validation rejections (HTTP/2 `:authority` fallback included).
    pub host_validation: Option<Level>,
    /// Open redirect: external redirect attempts blocked.
    pub open_redirect: Option<Level>,
    /// Anti-bot honeypot triggers.
    pub anti_bot: Option<Level>,
    /// HTTPS/ACME-TLS lifecycle: cert loaded, renewed, binding port 443, HTTP→HTTPS upgrade.
    pub https: Option<Level>,
}

impl MiddlewareTracing {
    pub fn new() -> Self {
        Self::default()
    }
    #[must_use]
    pub fn csrf(mut self, level: Level) -> Self {
        self.csrf = Some(level);
        self
    }
    #[must_use]
    pub fn csp(mut self, level: Level) -> Self {
        self.csp = Some(level);
        self
    }
    #[must_use]
    pub fn cors(mut self, level: Level) -> Self {
        self.cors = Some(level);
        self
    }
    #[must_use]
    pub fn rate_limit(mut self, level: Level) -> Self {
        self.rate_limit = Some(level);
        self
    }
    #[must_use]
    pub fn host_validation(mut self, level: Level) -> Self {
        self.host_validation = Some(level);
        self
    }
    #[must_use]
    pub fn open_redirect(mut self, level: Level) -> Self {
        self.open_redirect = Some(level);
        self
    }
    #[must_use]
    pub fn anti_bot(mut self, level: Level) -> Self {
        self.anti_bot = Some(level);
        self
    }
    #[must_use]
    pub fn https(mut self, level: Level) -> Self {
        self.https = Some(level);
        self
    }
    pub fn dev(self) -> Self {
        self.csrf(Level::DEBUG)
            .csp(Level::DEBUG)
            .cors(Level::DEBUG)
            .rate_limit(Level::DEBUG)
            .host_validation(Level::DEBUG)
            .open_redirect(Level::DEBUG)
            .anti_bot(Level::DEBUG)
            .https(Level::DEBUG)
    }
}