mirror of
https://github.com/mountain-loop/yaak.git
synced 2026-08-22 11:23:59 +02:00
Gregory Schier
253b939b34
crates-server/yaak-send-proxy: a stateless executor over yaak-http's HttpTransaction. It takes a rendered request, streams timeline events, the response head, body chunks and the resulting cookies back as NDJSON, and keeps nothing. Private/loopback/link-local/metadata ranges are refused after DNS on every hop (an AddressFilter on the resolver plus a per-hop URL check), with size caps, a timeout ceiling, a rate limit, host allow/deny lists and an optional token. The web host now sends through it: the wasm worker resolves and renders the request (render_http_request moved into yaak-models so it builds for wasm; re-exported from its old paths), the tab posts it, and stores what comes back where the desktop stores it. Requests needing auth plugins or template functions are refused with the reason until plugins run in the browser.
36 lines
1.2 KiB
TOML
36 lines
1.2 KiB
TOML
[package]
|
|
name = "yaak-send-proxy"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
publish = false
|
|
description = "Stateless HTTP send executor for Yaak in the browser"
|
|
|
|
# The send engine (yaak-http) and the model types it speaks (yaak-models, for
|
|
# HttpRequest / Cookie / HttpResponseEventData). Deliberately NOT yaak (the
|
|
# render + storage orchestration), yaak-plugins, or the RPC router: this binary
|
|
# opens no database, runs no plugins, and renders nothing. yaak-models comes
|
|
# along only because yaak-http's types are its types; nothing here calls into
|
|
# its query layer.
|
|
|
|
[[bin]]
|
|
name = "yaak-send-proxy"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
async-trait = "0.1"
|
|
axum = { version = "0.7", features = ["http1", "http2", "json", "tokio"] }
|
|
base64 = "0.22.1"
|
|
bytes = "1.11.1"
|
|
clap = { version = "4.5", features = ["derive", "env"] }
|
|
env_logger = "0.11"
|
|
futures-util = "0.3"
|
|
log = { workspace = true }
|
|
serde = { workspace = true, features = ["derive"] }
|
|
serde_json = { workspace = true }
|
|
tokio = { workspace = true, features = ["rt-multi-thread", "macros", "signal", "sync", "io-util", "time", "net"] }
|
|
tower-http = { version = "0.6", features = ["cors", "trace"] }
|
|
url = "2"
|
|
uuid = { version = "1", features = ["v4"] }
|
|
yaak-http = { workspace = true }
|
|
yaak-models = { workspace = true }
|