pavelkrolevets / rust-jwt-auth-mysql Goto Github PK

An example how to set up Rust server restful API with JWT authentication and ORM under the hood.

• User passwords hashed (argon2)

1. Configure Rust to satisfy rocket.rs dependencies (Rust nightly build needed)
2. Install Diesel ORM CLI and dependencies

   cargo install diesel_cli

3. Install and create Mysql database. More info here
4. Configure project environment variable in .env file taking username and passwork from Posgresql step

   DATABASE_URL=mysql://username:password@localhost/database_name
   

1. First run the migration to create tables and schema

   diesel migration run

2. Compile the code and run

   cargo run

Routs can be protected through JWT check in the message Header

#[get("/sensitive")]
fn sensitive(key: ApiKey) -> String {
    format!("Hello, you have been identified as {}", key.0)
}

curl -X POST \
  http://localhost:8001/user/register \
  -H 'content-type: application/json' \
  -d '{ "id": "test",
        "password": "12345"
}'

Get a jwt token for the user

curl -X POST \
  http://localhost:8001/auth/login \
  -H 'content-type: application/json' \
  -d '{ "id": "test",
        "password": "12345"
}'

Call a protected route with a JWT in the HEADER authentication (use the token returned from the /auth/login API)

curl -X GET \
  http://localhost:8001/user/sensitive \
  -H 'authentication: eyJ0eXAiOiJKV1QiLCJraWQiOm51bGwsImFsZyI6IkhTMjU2In0.eyJpc3MiOm51bGwsInN1YiI6InRlc3QiLCJhdWQiOm51bGwsImV4cCI6MTU3MzAyNzg5MSwibmJmIjpudWxsLCJpYXQiOm51bGwsImp0aSI6bnVsbH0.DJ5tb/ic91oULyMjZMeam9kMU31sxGSxSnTmTppUhdA'

1. https://github.com/marcocastignoli/rust_rocket_api_authentication
2. https://github.com/sean3z/rocket-diesel-rest-api-example
3. https://medium.com/sean3z/building-a-restful-crud-api-with-rust-1867308352d8
4. https://dzone.com/articles/creating-a-rest-api-in-rust-using-rocket-and-diese