kasl_server/
app.rs

1use axum::{
2    Json, Router,
3    extract::{DefaultBodyLimit, State},
4    http::StatusCode,
5    response::{IntoResponse, Response},
6    routing::{delete, get, patch, post},
7};
8use serde_json::json;
9use sqlx::PgPool;
10use tower_http::trace::TraceLayer;
11
12use crate::{admin, config::Config, ingest, login};
13
14#[derive(Clone)]
15pub struct AppState {
16    pub pool: PgPool,
17    /// Days one batch may carry; enforced by the batch handler.
18    pub max_batch_days: usize,
19    /// Whether session cookies carry `Secure`.
20    pub secure_cookies: bool,
21}
22
23/// Builds the router with the operator's limits applied.
24pub fn router_with(pool: PgPool, config: &Config) -> Router {
25    // `/api/v1` from the very first endpoint: kasl agents update on their own
26    // schedule, so the path a working agent calls must keep meaning what it
27    // meant when that agent shipped (ADR 0001).
28    let api_v1 = Router::new()
29        .route("/days", post(ingest::upload_day))
30        .route("/days/batch", post(ingest::upload_batch))
31        // People, not agents: these carry a session cookie rather than a
32        // bearer token, and the two never mix.
33        .route("/auth/login", post(login::login))
34        .route("/auth/logout", post(login::logout))
35        .route("/auth/logout-everywhere", post(login::logout_everywhere))
36        .route("/auth/me", get(login::me))
37        .route("/auth/password", post(admin::change_own_password))
38        // Administration. Reading the team is a manager's; changing it is not,
39        // until departments give a manager something to be in charge of.
40        .route("/users", get(admin::list_users).post(admin::create_user))
41        .route("/users/{id}", patch(admin::update_user))
42        .route("/users/{id}/agents", get(admin::list_agents).post(admin::create_agent))
43        .route("/agents/{id}", delete(admin::revoke_agent));
44
45    Router::new()
46        .route("/health", get(health))
47        .nest("/api/v1", api_v1)
48        .with_state(AppState {
49            pool,
50            max_batch_days: config.max_batch_days,
51            secure_cookies: config.secure_cookies,
52        })
53        // A body larger than this is refused before it is buffered: backfilling
54        // a year and attacking the server look identical up to the size.
55        .layer(DefaultBodyLimit::max(config.max_body_bytes))
56        .layer(TraceLayer::new_for_http())
57}
58
59/// The router with default limits - what the tests and `/health` callers want
60/// when the limits are not what is under test.
61pub fn router(pool: PgPool) -> Router {
62    router_with(pool, &Config::defaults_for_database(String::new()))
63}
64
65/// Liveness + readiness in one place: the process answers, and the database
66/// round-trip tells whether the server can actually do its job.
67async fn health(State(state): State<AppState>) -> Response {
68    match sqlx::query("SELECT 1").execute(&state.pool).await {
69        Ok(_) => (
70            StatusCode::OK,
71            Json(json!({
72                "status": "ok",
73                "version": env!("CARGO_PKG_VERSION"),
74                "database": "ok",
75            })),
76        )
77            .into_response(),
78        Err(error) => {
79            tracing::error!(%error, "health check: database unreachable");
80            (
81                StatusCode::SERVICE_UNAVAILABLE,
82                Json(json!({
83                    "status": "degraded",
84                    "version": env!("CARGO_PKG_VERSION"),
85                    "database": "unavailable",
86                })),
87            )
88                .into_response()
89        }
90    }
91}
92
93#[cfg(test)]
94mod tests {
95    use axum::{body::Body, http::Request};
96    use http_body_util::BodyExt;
97    use sqlx::postgres::PgPoolOptions;
98    use tower::ServiceExt;
99
100    use super::*;
101
102    /// A pool pointing nowhere: `connect_lazy` never dials until a query runs,
103    /// so the router can be exercised without a live database.
104    fn dead_pool() -> PgPool {
105        PgPoolOptions::new()
106            // Keep the failure fast: the default acquire timeout is 30 s.
107            .acquire_timeout(std::time::Duration::from_secs(1))
108            .connect_lazy("postgres://nobody:nowhere@127.0.0.1:1/kasl")
109            .expect("lazy pool creation does not touch the network")
110    }
111
112    #[tokio::test]
113    async fn health_reports_degraded_without_a_database() {
114        let response = router(dead_pool()).oneshot(Request::get("/health").body(Body::empty()).unwrap()).await.unwrap();
115        assert_eq!(response.status(), StatusCode::SERVICE_UNAVAILABLE);
116
117        let body = response.into_body().collect().await.unwrap().to_bytes();
118        let body: serde_json::Value = serde_json::from_slice(&body).unwrap();
119        assert_eq!(body["status"], "degraded");
120        assert_eq!(body["database"], "unavailable");
121        assert_eq!(body["version"], env!("CARGO_PKG_VERSION"));
122    }
123
124    #[tokio::test]
125    async fn unknown_routes_return_404() {
126        let response = router(dead_pool()).oneshot(Request::get("/nope").body(Body::empty()).unwrap()).await.unwrap();
127        assert_eq!(response.status(), StatusCode::NOT_FOUND);
128    }
129}
kasl_server/app.rs

kasl_server/
app.rs
