- π Day 23 - Web Development with Rust
- π Welcome
- π Overview
- π Environment Setup
- πΈ Introduction to Web Development with Rust
- π Setting Up a Rust Web Server
- π Handling Authentication and Security
- π¦ Working with JSON and APIs
- π Building a Simple Full-Stack Application
- π Popular Web Frameworks
- π οΈ Building a Simple Web Server
- π Exploring APIs and Routes
- ποΈ Database Integration
- π Deploying Rust Web Applications
- π― Hands-On Challenge
- π» Exercises - Day 23
- π₯ Helpful Video References
- π Further Reading
- π Day 23 Summary
Welcome to Day 23 of the 30 Days of Rust Challenge! π
Today, we dive into web development with Rust. While Rust isnβt traditionally associated with web development like JavaScript or Python, it has grown into a compelling choice for building high-performance, secure, and scalable web applications.
Whether you're building APIs, microservices, or complete web applications, Rust's ecosystem offers powerful tools to craft performant, secure, and scalable web solutions.
By the end of this lesson, you will:
- Understand Rustβs web development ecosystem.
- Learn about popular web frameworks like Actix Web, Rocket, and Warp.
- Build a simple web server with routes and APIs.
- Integrate a database for persistent storage.
- Explore authentication, security, and deployment strategies.
- Build a basic web server with Rust.
- Explore the
axum
crate for handling routes and middleware. - Learn to handle JSON payloads and develop REST APIs.
- Create a simple full-stack web application.
Letβs get started! π
Welcome to Day 23 of your Rust journey! Today, weβll dive into the exciting world of web development with Rust. π
Rust is gaining traction as a go-to language for building fast, reliable, and secure web applications. From crafting robust backends to implementing high-performance APIs, Rust's ecosystem has everything you need to excel.
In this session, weβll:
- Explore popular frameworks like
axum
andactix-web
. - Build our first REST API.
- Learn to integrate Rust backends with modern frontend frameworks like React or Vue.js.
Why Rust for Web Development?
- β‘ High Performance: Built for speed and concurrency.
- π Safety First: No more null pointer exceptions or data races!
- π Growing Ecosystem: Powerful libraries like
axum
,warp
, andactix-web
to streamline web development.
By the end of this day, youβll be equipped to create your first full-stack app with Rust at its core.
Letβs ensure youβre ready to code! Follow these steps to set up a complete environment for web development with Rust:
Ensure Rust is installed on your system:
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
Verify installation:
rustc --version
Cargo is Rust's package manager and build system. It's essential for managing dependencies and projects.
Update Cargo for the latest features:
cargo install-update -a
Weβll use axum
for this day. Add it to your project dependencies:
cargo new rust_web_project
cd rust_web_project
cargo add axum tokio serde serde_json
This command includes:
axum
: For building web servers.tokio
: For async runtime.serde
&serde_json
: For JSON serialization and deserialization.
To include database support, install a library like sqlx
for PostgreSQL:
cargo add sqlx --features postgres
- IDE: Use VS Code or IntelliJ IDEA with the Rust plugin for syntax highlighting and autocompletion.
- Linting: Install
clippy
to catch common mistakes:rustup component add clippy
- Formatting: Ensure consistent code style with
rustfmt
:rustup component add rustfmt
Test your setup with a simple Hello, World!
server:
use axum::{handler::get, Router};
#[tokio::main]
async fn main() {
let app = Router::new().route("/", get(|| async { "Hello, World!" }));
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
Start the server:
cargo run
Visit http://127.0.0.1:3000
in your browser, and youβre ready to go! π
Rust's emphasis on performance, type safety, and memory safety makes it an excellent choice for web applications that demand:
- Speed: Comparable to C and C++ for high-performance backends.
- Concurrency: Powerful async capabilities with
tokio
andasync-std
. - Security: Strong guarantees to prevent common bugs like data races and memory corruption.
- Efficiency: Rustβs zero-cost abstractions allow developers to write high-performance web servers.
- Reliability: Memory safety features reduce bugs, crashes, and vulnerabilities.
- Async Support: Rustβs async runtime makes handling thousands of connections easy.
- Ecosystem: Libraries like
axum
,warp
, andactix-web
simplify the development process.
-
Performance
Rust delivers low-level performance, making it ideal for web applications with high throughput and low latency requirements. -
Safety
Rustβs memory safety guarantees ensure fewer bugs and vulnerabilities compared to languages like C++ or PHP. -
Concurrency
With its async runtime and modern concurrency model, Rust is well-suited for handling multiple simultaneous connections. -
Rich Ecosystem
Tools likeaxum
,warp
, andactix-web
make web development simple and expressive. -
Cross-platform Deployments
Rust's portability allows seamless deployment across different platforms and environments.
Weβll use the axum
framework to build our server. Itβs lightweight, async-native, and easy to use for both beginners and experts.
Start by creating a new Rust project:
$ cargo new rust-web-server
$ cd rust-web-server
Add the following dependencies to your Cargo.toml
:
[dependencies]
axum = "0.6"
tokio = { version = "1", features = ["full"] }
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
tower = "0.4"
use axum::{routing::get, Router};
use std::net::SocketAddr;
#[tokio::main]
async fn main() {
// Define a basic route
let app = Router::new().route("/", get(|| async { "Hello, Rustacean!" }));
// Bind to an address and start the server
let addr = SocketAddr::from(([127, 0, 0, 1], 3000));
println!("Server running at http://{}", addr);
axum::Server::bind(&addr)
.serve(app.into_make_service())
.await
.unwrap();
}
Run the server with:
$ cargo run
Visit http://127.0.0.1:3000
in your browser. Youβll see Hello, Rustacean!
.
Hereβs a minimal example:
use axum::{routing::get, Router};
use std::net::SocketAddr;
#[tokio::main]
async fn main() {
// Define a basic route
let app = Router::new().route("/", get(|| async { "Hello, World!" }));
// Bind to an address and start the server
let addr = SocketAddr::from(([127, 0, 0, 1], 3000));
println!("Server running at http://{}", addr);
axum::Server::bind(&addr)
.serve(app.into_make_service())
.await
.unwrap();
}
Run the server with:
$ cargo run
Visit http://127.0.0.1:3000
to see Hello, World!
.
Define additional routes for different endpoints:
let app = Router::new()
.route("/", get(|| async { "Welcome to Rust Web Development!" }))
.route("/hello", get(|| async { "Hello, Rustacean!" }))
.route("/json", get(|| async { axum::Json(serde_json::json!({"message": "Hello, JSON!"})) }));
Use axum
βs request extractors to handle data:
use axum::{extract::Query, routing::get, Router};
use serde::Deserialize;
#[derive(Deserialize)]
struct GreetParams {
name: String,
}
#[tokio::main]
async fn main() {
let app = Router::new().route(
"/greet",
get(|Query(params): Query<GreetParams>| async move {
format!("Hello, {}!", params.name)
}),
);
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
Test it with:
$ curl "http://127.0.0.1:3000/greet?name=Het"
- JWT (JSON Web Tokens): For user authentication.
- OAuth: Integrate with third-party services like Google or GitHub.
- HTTPS: Use TLS to encrypt communication.
use actix_web::{dev::ServiceRequest, Error, HttpMessage};
use actix
_web_httpauth::middleware::HttpAuthentication;
async fn validator(req: ServiceRequest, _: actix_web::dev::Payload) -> Result<ServiceRequest, Error> {
if let Some(auth_header) = req.headers().get("Authorization") {
if auth_header == "Bearer secret-token" {
return Ok(req);
}
}
Err(actix_web::error::ErrorUnauthorized("Unauthorized"))
}
App::new().wrap(HttpAuthentication::with_fn(validator));
Middleware allows you to intercept requests or responses to add extra behavior like logging or authentication.
Middleware allows us to apply transformations, authentication, or logging.
use axum::{middleware, routing::get, Router};
async fn log_middleware<B>(req: axum::http::Request<B>) -> axum::http::Request<B> {
println!("Request: {:?}", req);
req
}
#[tokio::main]
async fn main() {
let app = Router::new()
.route("/", get(|| async { "Home Page" }))
.layer(middleware::from_fn(log_middleware));
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
use axum::{middleware, routing::get, Router};
use tower_http::trace::TraceLayer;
#[tokio::main]
async fn main() {
let app = Router::new()
.route("/", get(|| async { "Hello, Middleware!" }))
.layer(TraceLayer::new_for_http());
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
You can handle token-based authentication using extractors:
use axum::{extract::Extension, middleware, routing::get, Router};
async fn check_auth<B>(
req: axum::http::Request<B>,
) -> Result<axum::http::Request<B>, axum::http::Response<axum::body::Body>> {
if let Some(auth) = req.headers().get("Authorization") {
if auth == "Bearer mysecrettoken" {
return Ok(req);
}
}
Err(axum::http::Response::builder()
.status(401)
.body("Unauthorized".into())
.unwrap())
}
#[tokio::main]
async fn main() {
let app = Router::new()
.route("/", get(|| async { "Secure Zone!" }))
.layer(middleware::from_fn(check_auth));
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
Securing your server involves implementing HTTPS and robust authentication mechanisms. Here's a detailed guide with examples:
HTTPS ensures that the communication between your server and clients is encrypted, preventing data interception and tampering. In Rust, you can use libraries like hyper-rustls
or rustls
to add TLS (Transport Layer Security) support.
-
Install Dependencies
Add the required crates to yourCargo.toml
file:[dependencies] hyper = "0.14" hyper-rustls = "0.23" tokio = { version = "1", features = ["full"] }
-
Generate SSL Certificates
Use tools like Let's Encrypt or OpenSSL to create certificates.
For development purposes, generate self-signed certificates:openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
This creates
key.pem
(private key) andcert.pem
(certificate). -
Set Up the TLS Configuration
Here's an example of a basic HTTPS server usinghyper
andhyper-rustls
:use hyper::service::{make_service_fn, service_fn}; use hyper::{Body, Request, Response, Server}; use hyper_rustls::{HttpsConnectorBuilder, ServerConfig}; use std::sync::Arc; use tokio::fs::read; async fn handle_request(_req: Request<Body>) -> Result<Response<Body>, hyper::Error> { Ok(Response::new(Body::from("Hello, HTTPS World!"))) } #[tokio::main] async fn main() -> Result<(), Box<dyn std::error::Error>> { // Load SSL certificates let certs = read("cert.pem").await?; let key = read("key.pem").await?; let tls_config = ServerConfig::builder() .with_safe_defaults() .with_no_client_auth() .with_single_cert(certs, key)?; let tls_acceptor = Arc::new(tls_config); let addr = ([127, 0, 0, 1], 443).into(); let make_svc = make_service_fn(|_conn| async { Ok::<_, hyper::Error>(service_fn(handle_request)) }); let server = Server::builder(HttpsConnectorBuilder::new(tls_acceptor).build()) .serve(make_svc); println!("HTTPS Server running on https://{}", addr); server.await?; Ok(()) }
This server listens on port 443 and serves encrypted content using HTTPS.
Authentication ensures only authorized users can access certain parts of your application.
Basic Authentication sends a username and password with each request (over HTTPS).
Example:
use hyper::{header, Body, Request, Response, StatusCode};
async fn handle_request(req: Request<Body>) -> Result<Response<Body>, hyper::Error> {
if let Some(auth) = req.headers().get(header::AUTHORIZATION) {
if auth == "Basic dXNlcjpwYXNzd29yZA==" { // user:password base64
return Ok(Response::new(Body::from("Welcome, authenticated user!")));
}
}
let mut response = Response::new(Body::from("Unauthorized"));
*response.status_mut() = StatusCode::UNAUTHORIZED;
Ok(response)
}
JWT (JSON Web Tokens) are a more secure and scalable way to handle authentication.
- Add Dependencies:
[dependencies] jsonwebtoken = "8" serde = { version = "1.0", features = ["derive"] }
- Generate and Verify Tokens:
Example:use jsonwebtoken::{encode, decode, Header, Algorithm, Validation, EncodingKey, DecodingKey}; use serde::{Serialize, Deserialize}; #[derive(Debug, Serialize, Deserialize)] struct Claims { sub: String, exp: usize, } fn generate_jwt() -> String { let my_claims = Claims { sub: "user1".to_owned(), exp: 10000000000 }; encode(&Header::default(), &my_claims, &EncodingKey::from_secret("secret".as_ref())).unwrap() } fn verify_jwt(token: &str) -> bool { decode::<Claims>(token, &DecodingKey::from_secret("secret".as_ref()), &Validation::new(Algorithm::HS256)).is_ok() } fn main() { let token = generate_jwt(); println!("Generated JWT: {}", token); let is_valid = verify_jwt(&token); println!("Token is valid: {}", is_valid); }
- Use JWT in Headers for Secure Communication.
- Always use HTTPS in production.
- Store secrets securely (e.g., use environment variables).
- Use well-tested libraries for authentication.
- Regularly update dependencies to patch vulnerabilities.
Develop endpoints for CRUD operations:
use axum::{routing::get, Router, Json};
use serde::{Deserialize, Serialize};
#[derive(Serialize)]
struct User {
id: u32,
name: String,
}
async fn get_user() -> Json<User> {
Json(User {
id: 1,
name: "Het Patel".to_string(),
})
}
#[tokio::main]
async fn main() {
let app = Router::new().route("/user", get(get_user));
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
REST APIs are integral to web development. Use serde
for JSON serialization/deserialization.
use axum::{extract::Json, routing::post, Router};
use serde::Deserialize;
#[derive(Deserialize)]
struct CreateUser {
name: String,
}
async fn create_user(Json(payload): Json<CreateUser>) -> String {
format!("User {} created", payload.name)
}
#[tokio::main]
async fn main() {
let app = Router::new().route("/user", post(create_user));
axum::Server::bind(&([127, 0, 0, 1], 3000).into())
.serve(app.into_make_service())
.await
.unwrap();
}
#[derive(Deserialize)]
struct CreateUser {
name: String,
}
async fn create_user(Json(payload): Json<CreateUser>) -> String {
format!("User {} created", payload.name)
}
Letβs take it up a notch! π Here's how to integrate Rust for your backend and use React or Vue.js for the frontend. We'll create a TODO App as an example.
We'll use axum
for routing and serde
for JSON serialization.
-
Setup a POST endpoint to add a task:
use axum::{extract::Json, routing::post, Router}; use serde::{Deserialize, Serialize}; #[derive(Deserialize, Serialize)] struct Task { id: usize, title: String, completed: bool, } async fn add_task(Json(task): Json<Task>) -> Json<Task> { // Ideally, store tasks in a database; here, we'll just return it. Json(task) } #[tokio::main] async fn main() { let app = Router::new().route("/add_task", post(add_task)); axum::Server::bind(&([127, 0, 0, 1], 3000).into()) .serve(app.into_make_service()) .await .unwrap(); }
-
Frontend: Call the API
Usingfetch
oraxios
in React:async function addTask(task) { const response = await fetch("http://127.0.0.1:3000/add_task", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(task), }); const data = await response.json(); console.log(data); }
-
Test the Integration:
UsePostman
or the browser console to ensure the backend and frontend are talking smoothly.
Rust has several web frameworks to choose from, each with its unique strengths.
-
Features:
- Highly performant and scalable.
- Built on the powerful
actix
actor framework. - Supports middleware, websockets, and async operations.
-
Use Case:
- Ideal for building large-scale, production-grade APIs.
use actix_web::{web, App, HttpServer, Responder};
async fn greet() -> impl Responder {
"Hello, World!"
}
#[tokio::main]
async fn main() -> std::io::Result<()> {
HttpServer::new(|| {
App::new().route("/", web::get().to(greet))
})
.bind("127.0.0.1:8080")?
.run()
.await
}
-
Features:
- Simple, intuitive, and batteries-included.
- Focuses on developer productivity.
- Built-in support for templating and JSON.
-
Use Case:
- Quick prototyping or building RESTful APIs.
#[macro_use] extern crate rocket;
#[get("/")]
fn index() -> &'static str {
"Welcome to Rocket!"
}
#[launch]
fn rocket() -> _ {
rocket::build().mount("/", routes![index])
}
-
Features:
- Lightweight, functional-style framework.
- Built on
hyper
for speed and async capabilities. - Powerful composability with filters.
-
Use Case:
- Microservices and serverless APIs.
use warp::Filter;
#[tokio::main]
async fn main() {
let route = warp::path!("hello" / String)
.map(|name| format!("Hello, {}!", name));
warp::serve(route)
.run(([127, 0, 0, 1], 3030))
.await;
}
-
Features:
- Designed for ergonomics and performance.
- Leverages
tokio
andtower
for async and middleware.
-
Use Case:
- A balance between simplicity and scalability.
use axum::{Router, routing::get};
async fn handler() -> &'static str {
"Welcome to Axum!"
}
#[tokio::main]
async fn main() {
let app = Router::new().route("/", get(handler));
axum::Server::bind(&"127.0.0.1:4000".parse().unwrap())
.serve(app.into_make_service())
.await
.unwrap();
}
Letβs build a basic REST API with Actix Web.
-
Setup Project:
Add dependencies toCargo.toml
:[dependencies] actix-web = "4.0" serde = { version = "1.0", features = ["derive"] }
-
Define API Endpoints:
use actix_web::{web, App, HttpServer, Responder};
use serde::Serialize;
#[derive(Serialize)]
struct Message {
text: String,
}
async fn hello() -> impl Responder {
web::Json(Message { text: "Hello, Actix!".to_string() })
}
#[tokio::main]
async fn main() -> std::io::Result<()> {
HttpServer::new(|| {
App::new().route("/hello", web::get().to(hello))
})
.bind("127.0.0.1:8080")?
.run()
.await
}
- Run and Test:
Start the server and access the endpoint athttp://127.0.0.1:8080/hello
.
- Dynamic Routing:
async fn greet(name: web::Path<String>) -> impl Responder {
format!("Hello, {}!", name)
}
App::new().route("/greet/{name}", web::get().to(greet));
- Middleware:
Add logging, authentication, or custom behavior.
use actix_web::middleware::Logger;
App::new()
.wrap(Logger::default())
.route("/", web::get().to(index));
Rust provides great database support through libraries like:
- Diesel: Strongly-typed ORM.
- SQLx: Async and lightweight.
use sqlx::sqlite::SqlitePool;
#[tokio::main]
async fn main() -> Result<(), sqlx::Error> {
let pool = SqlitePool::connect("sqlite::memory:").await?;
sqlx::query("CREATE TABLE users (id INTEGER PRIMARY KEY, name TEXT)")
.execute(&pool)
.await?;
sqlx::query("INSERT INTO users (name) VALUES ('Alice')")
.execute(&pool)
.await?;
let row: (i64, String) = sqlx::query_as("SELECT id, name FROM users WHERE name = 'Alice'")
.fetch_one(&pool)
.await?;
println!("User: {} with ID {}", row.1, row.0);
Ok(())
}
- Containerization: Use Docker to package your application.
- Hosting:
- Cloud services like AWS, Azure, or DigitalOcean.
- Serverless platforms like Fly.io or Vercel.
FROM rust:1.72 as builder
WORKDIR /app
COPY . .
RUN cargo build --release
FROM debian:buster
WORKDIR /app
COPY --from=builder /app/target/release/my-app .
CMD ["./my-app"]
Put your skills to the test with these hands-on challenges for Day 23!
Build a simple blog backend that supports:
- Adding blog posts (POST).
- Viewing all posts (GET).
- Deleting posts by ID (DELETE).
Bonus: Implement an in-memory database (e.g., HashMap
) to store the posts temporarily.
Build a simple blog backend with Rust:
- Define routes for post creation, retrieval, and deletion.
- Use JSON to manage posts.
- Build a RESTful API that includes CRUD operations for a
Book
resource. - Integrate an SQLite database for storing books.
- Secure your API with basic JWT authentication.
- Set up a basic Rust web server with
axum
. - Add routes for
/
and/hello
. - Display a JSON response on a
/data
route.
- Build a REST API to manage a User Registry:
- Add a user (POST).
- List all users (GET).
- Update a user's details (PUT).
- Delete a user (DELETE).
- Build a secure full-stack application:
- Backend: Use Rust to create a CRUD API for tasks with authentication middleware.
- Frontend: Use React or Vue.js for a responsive UI.
- Use Docker to containerize the application.
Bonus Challenge: Implement OAuth2 login (e.g., Google Sign-In) for your application.
Boost your learning with these handpicked video tutorials:
- Rust Web Development with Axum - A beginner-friendly introduction to building web apps with Axum.
- Building REST APIs in Rust - Covers advanced REST API concepts.
- Rust Async Programming Demystified - Learn async programming in Rust to handle concurrent requests.
- Integrating Rust with React Frontend - Full-stack development using Rust and React.
For those eager to dive deeper, here are some valuable resources:
- Official Axum Documentation
Comprehensive guide on building apps with Axum. - Rust Web Development Handbook
A comprehensive guide to building scalable and efficient web applications with Rust development. - The Tower Library
Middleware library for building scalable web services. - Tokio Async Runtime
Master Rust's async ecosystem with Tokio. - Understanding Actix Web
Learn another popular Rust web framework.
Today, we explored the fascinating world of web development with Rust:
- Learned about popular frameworks like Actix Web, Rocket, Warp, and Axum.
- Built a simple REST API.
- Integrated a database using SQLx.
- Explored authentication and security best practices.
- Discussed deployment strategies for Rust web applications.
Rust empowers developers to build fast, secure, and scalable web apps. Practice the hands-on challenges to solidify your knowledge!
Stay tuned for Day 24, where we will explore Integrating with C/C++ in Rust in Rust! π
π Great job on completing Day 23! Keep practicing, and get ready for Day 24!
Thank you for joining Day 23 of the 30 Days of Rust challenge! If you found this helpful, donβt forget to star this repository, share it with your friends, and stay tuned for more exciting lessons ahead!
Stay Connected
π§ Email: Hunterdii
π¦ Twitter: @HetPate94938685
π Website: Working On It(Temporary)