1
0
mirror of https://github.com/fafhrd91/actix-web synced 2025-01-31 02:52:53 +01:00
pando85 4fc99d4a6f
Fix audit issue logging by default peer address (#1485)
* Fix audit issue logging by default peer address

By default log format include remote address that is taken from headers.
This is very easy to replace making log untrusted.

Changing default log format value `%a` to peer address we are getting
this trusted data always. Also, remote address option is maintianed and
relegated to `%{r}a` value.

Related  kanidm/kanidm#191.

* Rename peer/remote to remote_addr/realip_remote_addr

Change names to avoid naming confusions. I choose this accord to Nginx
variables and
[ngx_http_realip_module](https://nginx.org/en/docs/http/ngx_http_realip_module.html).

Add more specific documentation about security concerns of using Real IP
in logger.

* Rename security advertise header in doc

* Add fix audit issue logging by default peer adress to changelog

Co-authored-by: Rob Ede <robjtede@icloud.com>
2020-05-15 09:07:27 +09:00
2020-05-13 01:57:37 +01:00
2020-03-12 07:57:38 +09:00
2020-05-13 01:57:37 +01:00
2020-05-13 01:57:37 +01:00
2020-05-13 01:57:37 +01:00
2020-03-12 07:57:38 +09:00
2020-03-12 07:57:38 +09:00
2020-05-13 01:57:37 +01:00
2020-02-08 02:20:01 +09:00
2020-05-13 01:57:37 +01:00
2020-03-12 00:52:21 -03:00
2018-10-08 21:58:37 -07:00
2017-11-27 16:41:37 -08:00
2018-01-21 15:29:02 -08:00
2017-12-17 10:08:44 -08:00
2018-03-24 09:35:52 +03:00
2020-04-23 03:39:09 +09:00
2020-05-13 01:57:37 +01:00
2019-03-01 22:51:32 -08:00

Actix web

Actix web is a small, pragmatic, and extremely fast rust web framework

Build Status codecov crates.io Join the chat at https://gitter.im/actix/actix Documentation Download Version License

Website | Chat | Examples


Actix web is a simple, pragmatic and extremely fast web framework for Rust.

  • Supported HTTP/1.x and HTTP/2.0 protocols
  • Streaming and pipelining
  • Keep-alive and slow requests handling
  • Client/server WebSockets support
  • Transparent content compression/decompression (br, gzip, deflate)
  • Configurable request routing
  • Multipart streams
  • Static assets
  • SSL support with OpenSSL or Rustls
  • Middlewares (Logger, Session, CORS, etc)
  • Includes an asynchronous HTTP client
  • Supports Actix actor framework
  • Supports Rust 1.40+

Docs

Example

Dependencies:

[dependencies]
actix-web = "2"
actix-rt = "1"

Code:

use actix_web::{get, web, App, HttpServer, Responder};

#[get("/{id}/{name}/index.html")]
async fn index(info: web::Path<(u32, String)>) -> impl Responder {
    format!("Hello {}! id:{}", info.1, info.0)
}

#[actix_rt::main]
async fn main() -> std::io::Result<()> {
    HttpServer::new(|| App::new().service(index))
        .bind("127.0.0.1:8080")?
        .run()
        .await
}

More examples

You may consider checking out this directory for more examples.

Benchmarks

License

This project is licensed under either of

at your option.

Code of Conduct

Contribution to the actix-web crate is organized under the terms of the Contributor Covenant, the maintainer of actix-web, @fafhrd91, promises to intervene to uphold that code of conduct.

Description
Actix web is a small, pragmatic, and extremely fast rust web framework. https://actix.rs
Readme 25 MiB
Languages
Rust 99.4%
Shell 0.4%
Just 0.2%