Skip to content

Latest commit

 

History

History
77 lines (64 loc) · 4.43 KB

README.md

File metadata and controls

77 lines (64 loc) · 4.43 KB
Raw

zero2prod

Thanks a lot to Luca Palmieri for his great book Zero To Production In Rust. I really enjoyed reading and coding along with it.

This repository contains the code from the book along with changes i made because i wanted to use axum (instead of Actix Web) and SeaORM (instead of raw SQLx)

ToDo

  • (skipped the Digital Ocean Deployment) Local Deployment on HomeLab triggered through GitHub
    • zero downtime?
  • revisit ConnectOptions in configuration.rs. There are no PgConnectOptions in SeaORM and ConnectOption from SeaORM don't allow you to use a builder like pattern. It only allow you to pass a connection String.
  • Cross Compilation for Alpine base image (even smaller bundle size and lower attack surface ^^)
    • but also allow different platforms (amd64 & armv8)
  • Chapter 7 Summary opportunities
    • What happens if a user tries to subscribe twice? Make sure that they receive two confirmation emails;
    • What happens if a user clicks on a confirmation link twice?
    • What happens if the subscription token is well-formatted but non-existent?
    • Add validation on the incoming token, we are currently passing the raw user input straight into a query (thanks sqlx for protecting us from SQL injections <3);
    • Use a proper templating solution for our emails (e.g.tera);
    • Anything that comes to your mind!
      • something goes wrong while email send api request
  • config validation
  • testing if it works with mailersend
  • Authentication middleware to bubble up the UnexpectedError, we need to access the state for our hmac secret, which is needed to sign the response. This isn't possible in a IntoResponse trait, cause there is no access to the state. see also here
    • p. 454
  • try out strongly typed tower-sessions (example) (it was just the next chapter ^^;)
  • p.495 implement that the seed admin can invite more admins
  • seed first admin from env variable on first startup
  • more startup logging
    • url, mode
  • axum-flash doesn't work in safari, lets check it out
  • p. 501 write a middleware to protect all admin endpoints (so you don't have to check every time if the user is logged in)
  • p. 508 check password strength
  • look into the different possibilities to implement middlewares with axum :D
  • Chapter 10 Summary opportunities
    • Add a Send a newsletter issue link to the admin dashboard
    • Add an HTML form at GET /admin/newsletters to submit a new issue
    • Adapt POST /newsletters to process the form data
      • Change the route to POST /admin/newsletters
      • Migrate from ‘Basic’ to session-based authentication
      • Use the Form extractor (application/x-www-form-urlencoded) instead of the Json extractor (application/json) to handle the request body
      • Adapt the test suite.

Docker

Build (for linux docker images)

supported TARGETPLATFORM: linux/amd64, linux/arm64
own supported docker platform: docker build -t zero2prod:musl-cross .
other supported docker platform : docker build -t zero2prod:musl-cross --platform ${TARGETPLATFORM} .\

pls replace, ${TARGETPLATFORM} with one of the supported targets and you can tag your image for example with -t zero2prod:musl-cross-aarch64

example for docker manifest:

docker manifest create \
{REPO}/{USER}/zero2prod:musl-cross \
--amend {REPO}/{USER}/zero2prod:musl-cross-amd64 \
--amend {REPO}/{USER}/zero2prod:musl-cross-arm64

docker manifest push {REPO}/{USER}/zero2prod:musl-cross

E-Mail

  • normally I don't want to include an external (for this tutorial) service so suggested postmark wouldn't be an option.
  • cuttlefish & postal seems a bit overkill setup wise, also if in general they seem interesting
    • not the biggest ruby fan, performance wise
  • would be interesting to test out libs like lettre, also if a lot of the functionality from an full powered solution like postmark, etc. will be lost.
  • so back to mailproviders; Options:
    • Postmark
    • Mailgun
    • Mailjet
    • mailersend
    • sendgrid
  • i will use mailersend (This selection was not based on any facts, just personal preferences)