book

Rust Web Development

Name: Rust Web Development
Author: Bastian Gruber
ISBN: 9781617299001

by Bastian Gruber

February 2023

Intermediate to advanced

400 pages

9h 53m

English

Manning Publications

Read now

Unlock full access

inside front cover
Rust Web Development
Copyright
dedication
contents
front matter
prefaceacknowledgmentsabout this bookWho should read this bookHow this book is organized: A road mapAbout the codeliveBook discussion forumabout the authorabout the cover illustration
Part 1 Introduction to Rust
1 Why Rust?
1.1 Batteries included: Rust’s tooling1.2 The Rust compiler1.3 Rust for web services1.4 Maintainability of Rust applicationsSummary
2 Laying the foundation
2.1 Following the Rust playbook2.1.1 Modeling your resources with structs2.1.2 Understanding options2.1.3 Using documentation to solve errors2.1.4 Handling strings in Rust2.1.5 Taking an excursion into moving, borrowing, and ownership2.1.6 Using and implementing traits2.1.7 Handling results2.2 Creating our web server2.2.1 Handling multiple requests at once2.2.2 Rust’s asynchronous environment2.2.3 Rust’s handling of async/await2.2.4 Using Rust’s Future type2.2.5 Choosing a runtime2.2.6 Choosing a web frameworkSummary
Part 2 Getting started

3 Create your first route handler
3.1 Getting to know our web framework: Warp3.1.1 What is included in Warp3.1.2 Warp’s filter system3.2 GET your first JSON response3.2.1 Align with your framework’s way of thinking3.2.2 Handle the success route3.2.3 Get help from Serde3.2.4 Handle errors gracefully3.3 Handling CORS headers3.3.1 Returning CORS headers on the application level3.3.2 Testing CORS responsesSummary
4 Implement a RESTful API
4.1 GET questions from in-memory4.1.1 Setting up a mock database4.1.2 Preparing a set of test data4.1.3 Reading from the fake database4.1.4 Parsing query parameters4.1.5 Returning custom errors4.2 POST, PUT, and DELETE questions4.2.1 Updating our data in a thread-safe way4.2.2 Adding a question4.2.3 Updating a question4.2.4 Handling malformed requests4.2.5 Removing questions from the storage4.3 POST answers via url-form-encoded4.3.1 Difference between url-form-encoded and JSON4.3.2 Adding answers via url-form-encodedSummary
5 Clean up your codebase
5.1 Modularizing your code5.1.1 Using Rust’s built-in mod system5.1.2 Practical folder structure for different use cases5.1.3 Creating libraries and sub-crates5.2 Documenting your code5.2.1 Using doc comments and private comments5.2.2 Adding code in your comments5.3 Linting and formatting your codebase5.3.1 Installing and using Clippy5.3.2 Formatting your code with RustfmtSummary
6 Logging, tracing, and debugging
6.1 Logging in your Rust application6.1.1 Implementing logging in your web service6.1.2 Logging incoming HTTP requests6.1.3 Creating structured logs6.2 Tracing in asynchronous applications6.2.1 Introducing the Tracing crate6.2.2 Integrating tracing in our application6.3 Debugging Rust applications6.3.1 Using GDB on the command line6.3.2 Debugging our web service with LLDB6.3.3 Using Visual Studio Code and LLDBSummary
7 Add a database to your application
7.1 Setting up our example database7.2 Creating our first tables7.3 Working with a database crate7.3.1 Adding SQLx into our project7.3.2 Connecting Store to our database7.4 Reimplementing our route handlers7.4.1 Adding the database to get_questions7.4.2 Reimplementing the add_question route handler7.4.3 Adjusting the update and delete questions handler7.4.4 Updating the add_answer route7.5 Error handling and tracing database interactions7.6 Integrating SQL migrations7.7 Case study: Switching database management systemsSummary
8 Integrate third-party APIs
8.1 Preparing the codebase8.1.1 Picking an API8.1.2 Getting to know our HTTP crate8.1.3 Adding an example HTTP call with Reqwest8.1.4 Handling errors for external API requests8.2 Deserializing JSON responses to structs8.2.1 Gathering API response information8.2.2 Creating types for our API responses8.3 Sending questions and answers to the API8.3.1 Refactoring the add_question route handler8.3.2 Making profanity checks for updating questions8.3.3 Updating the add_answer route handler8.4 Handling timeouts and multiple requests at once8.4.1 Implementing a retry for external HTTP calls8.4.2 Executing futures concurrently or in parallelSummary
Part 3 Bring it into production
9 Add authentication and authorization
9.1 Adding authentication to our web service9.1.1 Creating the user concept9.1.2 Migrating the database9.1.3 Adding the registration endpoint9.1.4 Hashing the password9.1.5 Handling duplicate account errors9.1.6 Stateful vs. stateless authentication9.1.7 Adding the login endpoint9.1.8 Adding an expiry date to tokens9.2 Adding authorization middleware9.2.1 Migrating the database tables9.2.2 Creating token validation middleware9.2.3 Extending existing routes to handle account IDs9.3 What we didn’t coverSummary
10 Deploy your application
10.1 Setting up your application through environment variables10.1.1 Set up config files10.1.2 Accept command-line inputs for your application10.1.3 Read and parse environment variables into your web service10.2 Compiling your web service for different environments10.2.1 Development vs. release flag when building your binary10.2.2 Cross-compile your binary for different environments10.3 Using build.rs in your build process10.4 Creating the right Docker image for your web service10.4.1 Create a statically linked Docker image10.4.2 Set up a local Docker environment with docker-compose10.4.3 Extract the configuration of the web server into a new moduleSummary
11 Testing your Rust application
11.1 Unit testing our business logic11.1.1 Testing the pagination logic and dealing with custom errors11.1.2 Testing the Config module with environment variables11.1.3 Testing the profanity module with a newly created mock server11.2 Testing our Warp filters11.3 Creating an integration testing setup11.3.1 Splitting up the codebase into a lib.rs and a binary11.3.2 Creating the integration-test crate and the oneshot server implementation11.3.3 Adding the registration test11.3.4 Unwinding in case of an error11.3.5 Testing the login and posting questionsSummary
appendix A Thinking about security
A.1 Verify your dependencies for security issuesA.2 Verify your own codeA.3 Closing words
index
inside back cover

Content preview from Rust Web Development

appendix A. Thinking about security

When developing an API or other web services, you have to think about how to secure your endpoints, validate the data that comes in, and understand how an attacker might abuse your application. These topics span multiple books and can’t be covered here. However, what we can do in the scope of this book is introduce tools you can use to inspect and verify your Rust code, so at least this aspect of the security audit can be done.

A.1 Verify your dependencies for security issues

Building a Rust codebase involves pulling in sometimes hundreds of dependencies. Verifying them all by hand is tedious and, dare I say it, impossible. A CLI tool called Cargo-crev can help you with that task. This code review system enables ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781617299001Publisher Support Publisher Website

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Rust Web Development

by Bastian Gruber

appendix A. Thinking about security

A.1 Verify your dependencies for security issues

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.