root
34ba4dc6ed
- solitaire_server: Axum auth, sync push/pull, leaderboard, daily challenge, account deletion, JWT middleware, rate limiting via tower_governor, SQLite migrations, health endpoint - solitaire_server: expose build_test_router (no rate limiting) so integration tests work without a peer IP in oneshot requests - solitaire_sync: SyncPayload, merge logic, shared API types - solitaire_data: SyncProvider trait, LocalOnlyProvider, SolitaireServerClient, auth_tokens keyring integration, blanket Box<dyn SyncProvider> impl - solitaire_data/settings: derive Default on SyncBackend (clippy fix) - .sqlx/: offline query cache so server compiles without a live DB - sqlx: removed non-existent "offline" feature flag - keyring v2: fixed Entry::new() returning Result<Entry> - sqlx 0.8: all SQLite TEXT columns wrapped in Option<T> - Integration tests: max_connections(1) on in-memory pool so all connections share the same schema All 191 tests pass; cargo clippy -D warnings clean. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
94 lines
3.0 KiB
Rust
94 lines
3.0 KiB
Rust
//! Solitaire Quest sync server library.
|
|
//!
|
|
//! Exposes [`build_router`] so integration tests can construct the full Axum
|
|
//! application against an in-memory SQLite database without starting a real
|
|
//! TCP listener.
|
|
|
|
pub mod auth;
|
|
pub mod challenge;
|
|
pub mod error;
|
|
pub mod leaderboard;
|
|
pub mod middleware;
|
|
pub mod sync;
|
|
|
|
use axum::{
|
|
extract::DefaultBodyLimit,
|
|
middleware as axum_middleware,
|
|
routing::{delete, get, post},
|
|
Router,
|
|
};
|
|
use sqlx::SqlitePool;
|
|
use std::sync::Arc;
|
|
use tower_governor::{governor::GovernorConfigBuilder, GovernorLayer};
|
|
|
|
/// Construct the full Axum [`Router`].
|
|
///
|
|
/// Separated from `main` so it can be instantiated in integration tests without
|
|
/// starting a real TCP listener.
|
|
pub fn build_router(pool: SqlitePool) -> Router {
|
|
build_router_inner(pool, true)
|
|
}
|
|
|
|
/// Construct the router without rate limiting.
|
|
///
|
|
/// Intended for integration tests only — do not use in production.
|
|
#[doc(hidden)]
|
|
pub fn build_test_router(pool: SqlitePool) -> Router {
|
|
build_router_inner(pool, false)
|
|
}
|
|
|
|
fn build_router_inner(pool: SqlitePool, rate_limit: bool) -> Router {
|
|
// Protected routes require a valid JWT (injected by require_auth middleware).
|
|
let protected = Router::new()
|
|
.route("/api/sync/pull", get(sync::pull))
|
|
.route("/api/sync/push", post(sync::push))
|
|
.route("/api/leaderboard", get(leaderboard::get_leaderboard))
|
|
.route("/api/leaderboard/opt-in", post(leaderboard::opt_in))
|
|
.route("/api/account", delete(auth::delete_account))
|
|
.layer(axum_middleware::from_fn(middleware::require_auth));
|
|
|
|
// Auth endpoints — rate-limited in production, unrestricted in tests.
|
|
let auth_routes = Router::new()
|
|
.route("/api/auth/register", post(auth::register))
|
|
.route("/api/auth/login", post(auth::login))
|
|
.route("/api/auth/refresh", post(auth::refresh));
|
|
|
|
let auth_routes = if rate_limit {
|
|
// Rate limiter: 10 requests per minute per IP.
|
|
// burst_size = 10, replenish every 6 seconds = 10/min steady-state.
|
|
let governor_conf = Arc::new(
|
|
GovernorConfigBuilder::default()
|
|
.per_second(6)
|
|
.burst_size(10)
|
|
.finish()
|
|
.expect("invalid governor config"),
|
|
);
|
|
auth_routes.layer(GovernorLayer {
|
|
config: governor_conf,
|
|
})
|
|
} else {
|
|
auth_routes
|
|
};
|
|
|
|
// Public endpoints (no auth, no rate limit beyond defaults).
|
|
let public = Router::new()
|
|
.route("/api/daily-challenge", get(challenge::daily_challenge))
|
|
.route("/health", get(health));
|
|
|
|
Router::new()
|
|
.merge(protected)
|
|
.merge(auth_routes)
|
|
.merge(public)
|
|
// Reject request bodies larger than 1 MB.
|
|
.layer(DefaultBodyLimit::max(1024 * 1024))
|
|
.with_state(pool)
|
|
}
|
|
|
|
/// `GET /health` — simple liveness probe, no auth required.
|
|
async fn health() -> axum::Json<serde_json::Value> {
|
|
axum::Json(serde_json::json!({
|
|
"status": "ok",
|
|
"version": env!("CARGO_PKG_VERSION"),
|
|
}))
|
|
}
|