packages/ak-axum: init (goauthentik#21313)

Author: rissson

Cargo.lock

@@ -1,5 +1,6 @@
 [workspace]
 members = [
+  "packages/ak-axum",
   "packages/ak-common",
   "packages/client-rust",
   "website/scripts/docsmg",
@@ -21,6 +22,7 @@ publish = false
 arc-swap = "= 1.9.1"
 axum-server = { version = "= 0.8.0", features = ["tls-rustls-no-provider"] }
 aws-lc-rs = { version = "= 1.16.2", features = ["fips"] }
+axum = { version = "= 0.8.8", features = ["http2", "macros", "ws"] }
 clap = { version = "= 4.6.0", features = ["derive", "env"] }
 colored = "= 3.1.1"
 config-rs = { package = "config", version = "= 0.15.22", default-features = false, features = [
@@ -29,6 +31,7 @@ config-rs = { package = "config", version = "= 0.15.22", default-features = fals
 ] }
 console-subscriber = "= 0.5.0"
 dotenvy = "= 0.15.7"
+durstr = "= 0.5.1"
 eyre = "= 0.6.12"
 glob = "= 0.3.3"
 json-subscriber = "= 0.2.8"
@@ -73,6 +76,8 @@ time = { version = "= 0.3.47", features = ["macros"] }
 thiserror = "= 2.0.18"
 tokio = { version = "= 1.51.0", features = ["full", "tracing"] }
 tokio-util = { version = "= 0.7.18", features = ["full"] }
+tower = "= 0.5.3"
+tower-http = { version = "= 0.6.8", features = ["timeout"] }
 tracing = "= 0.1.44"
 tracing-error = "= 0.2.1"
 tracing-subscriber = { version = "= 0.3.23", features = [

Cargo.toml

@@ -0,0 +1,20 @@
+[package]
+name = "authentik-axum"
+version.workspace = true
+authors.workspace = true
+edition.workspace = true
+readme.workspace = true
+homepage.workspace = true
+repository.workspace = true
+license-file.workspace = true
+publish.workspace = true
+
+[dependencies]
+axum.workspace = true
+durstr.workspace = true
+ak-common.workspace = true
+tower.workspace = true
+tower-http.workspace = true
+
+[lints]
+workspace = true

packages/ak-axum/Cargo.toml

@@ -0,0 +1,3 @@
+//! Utilities for working with [`axum`].
+
+pub mod router;

packages/ak-axum/src/lib.rs

@@ -0,0 +1,22 @@
+//! Utilities for working with [`Router`].
+
+use ak_common::config;
+use axum::{Router, http::StatusCode};
+use tower::ServiceBuilder;
+use tower_http::timeout::TimeoutLayer;
+
+/// Wrap a [`Router`] with common middlewares.
+#[inline]
+pub fn wrap_router(router: Router) -> Router {
+    let config = config::get();
+    let timeout = durstr::parse(&config.web.timeout_http_read_header)
+        .expect("Invalid duration in http timeout")
+        + durstr::parse(&config.web.timeout_http_read).expect("Invalid duration in http timeout")
+        + durstr::parse(&config.web.timeout_http_write).expect("Invalid duration in http timeout")
+        + durstr::parse(&config.web.timeout_http_idle).expect("Invalid duration in http timeout");
+    let service_builder = ServiceBuilder::new().layer(TimeoutLayer::with_status_code(
+        StatusCode::REQUEST_TIMEOUT,
+        timeout,
+    ));
+    router.layer(service_builder)
+}