Releases · saschagrunert/webapp.rs

Complete Rewrite

This is a ground-up rewrite of webapp.rs, replacing the original Yew + actix-web + Diesel stack with modern Rust web technologies.

Layer	Old (v1)	New (v2)
Frontend	Yew	Leptos (WASM with SSR + hydration)
Backend	actix-web	Axum (via leptos_axum)
Database	Diesel (SQLite)	SQLx (PostgreSQL)
Auth	Basic	JWT + Argon2 password hashing

Leptos SSR + hydration: Single crate compiles to both server binary and WASM client
Server functions: Frontend-backend communication via #[server] macros, no separate REST API
Argon2 password hashing with unique salts
JWT session tokens with automatic renewal and server-side session tracking
CSRF protection via Origin/Referer header validation
Per-IP rate limiting (sliding window, 20 POST requests/min)
Periodic session cleanup of expired sessions
Health check endpoint (/healthz) with database connectivity verification
Docker multi-stage build with cargo-chef for layer caching
CI pipeline: format, clippy, tests with code coverage (codecov), cargo-leptos build, container build with BuildKit cache
Rust 2024 edition
License changed to Apache 2.0