Support path prefix in reverse proxy scenarios.

MIvanchev · MIvanchev · commit 452a61be59ff · 2025-12-30T11:26:51.000+01:00
diff --git a/crates/wastebin_server/src/handlers/download.rs b/crates/wastebin_server/src/handlers/download.rs
@@ -3,10 +3,10 @@ use axum::http::header;
 use axum::response::{IntoResponse, Response};
 use axum_extra::headers::HeaderValue;
 
-use crate::Page;
 use crate::cache::Key;
 use crate::handlers::extract::{Password, Theme};
 use crate::handlers::html::{ErrorResponse, PasswordInput, make_error};
+use crate::{PATH_PREFIX, Page};
 use wastebin_core::db::read::{Data, Entry};
 use wastebin_core::db::{self, Database};
 
@@ -27,6 +27,7 @@ pub async fn get(
                 Ok(get_download(&key, data).into_response())
             }
             Err(db::Error::NoPassword) => Ok(PasswordInput {
+                path_prefix: PATH_PREFIX.with(|val| val.to_string()),
                 page: page.clone(),
                 theme: theme.clone(),
                 id: key.id.to_string(),
diff --git a/crates/wastebin_server/src/handlers/html/burn.rs b/crates/wastebin_server/src/handlers/html/burn.rs
@@ -6,7 +6,7 @@ use crate::cache::Key;
 use crate::handlers::extract::Theme;
 use crate::handlers::html::qr::{code_from, dark_modules};
 use crate::handlers::html::{ErrorResponse, make_error};
-use crate::{Error, Page};
+use crate::{Error, PATH_PREFIX, Page};
 
 /// GET handler for the burn page.
 pub async fn get(
@@ -25,6 +25,7 @@ pub async fn get(
         .map_err(Error::from)??;
 
         Ok(Burn {
+            path_prefix: PATH_PREFIX.with(|val| val.to_string()),
             page: page.clone(),
             key,
             code,
@@ -39,6 +40,7 @@ pub async fn get(
 #[derive(Template, WebTemplate)]
 #[template(path = "burn.html", escape = "none")]
 pub(crate) struct Burn {
+    path_prefix: String,
     page: Page,
     key: Key,
     code: qrcodegen::QrCode,
diff --git a/crates/wastebin_server/src/handlers/html/index.rs b/crates/wastebin_server/src/handlers/html/index.rs
@@ -2,7 +2,7 @@ use askama::Template;
 use askama_web::WebTemplate;
 use axum::extract::State;
 
-use crate::{Highlighter, Page, handlers::extract::Theme};
+use crate::{Highlighter, PATH_PREFIX, Page, handlers::extract::Theme};
 
 /// GET handler for the index page.
 pub async fn get(
@@ -11,6 +11,7 @@ pub async fn get(
     theme: Option<Theme>,
 ) -> Index {
     Index {
+        path_prefix: PATH_PREFIX.with(|val| val.to_string()),
         page,
         theme,
         highlighter,
@@ -21,6 +22,7 @@ pub async fn get(
 #[derive(Template, WebTemplate)]
 #[template(path = "index.html")]
 pub(crate) struct Index {
+    path_prefix: String,
     page: Page,
     theme: Option<Theme>,
     highlighter: Highlighter,
diff --git a/crates/wastebin_server/src/handlers/html/mod.rs b/crates/wastebin_server/src/handlers/html/mod.rs
@@ -7,13 +7,14 @@ use askama::Template;
 use askama_web::WebTemplate;
 use axum::http::StatusCode;
 
-use crate::Page;
 use crate::handlers::extract::Theme;
+use crate::{PATH_PREFIX, Page};
 
 /// Error page showing a message.
 #[derive(Template, WebTemplate)]
 #[template(path = "error.html")]
 pub(crate) struct Error {
+    pub path_prefix: String,
     pub page: Page,
     pub theme: Option<Theme>,
     pub description: String,
@@ -23,6 +24,7 @@ pub(crate) struct Error {
 #[derive(Template, WebTemplate)]
 #[template(path = "encrypted.html")]
 pub(crate) struct PasswordInput {
+    pub path_prefix: String,
     pub page: Page,
     pub theme: Option<Theme>,
     pub id: String,
@@ -38,6 +40,7 @@ pub fn make_error(error: crate::Error, page: Page, theme: Option<Theme>) -> Erro
     (
         error.into(),
         Error {
+            path_prefix: PATH_PREFIX.with(|val| val.to_string()),
             page,
             theme,
             description,
diff --git a/crates/wastebin_server/src/handlers/html/paste.rs b/crates/wastebin_server/src/handlers/html/paste.rs
@@ -7,7 +7,7 @@ use serde::Deserialize;
 use crate::cache::Key;
 use crate::handlers::extract::{Theme, Uid};
 use crate::handlers::html::{ErrorResponse, PasswordInput, make_error};
-use crate::{Cache, Database, Highlighter, Page};
+use crate::{Cache, Database, Highlighter, PATH_PREFIX, Page};
 use wastebin_core::crypto::Password;
 use wastebin_core::db;
 use wastebin_core::db::read::{Data, Entry, Metadata};
@@ -22,6 +22,7 @@ pub(crate) struct PasswordForm {
 #[derive(Template, WebTemplate)]
 #[template(path = "formatted.html")]
 pub(crate) struct Paste {
+    path_prefix: String,
     page: Page,
     key: Key,
     theme: Option<Theme>,
@@ -57,6 +58,7 @@ pub async fn get<E>(
             Ok(Entry::Burned(data)) => (data, false),
             Err(db::Error::NoPassword) => {
                 return Ok(PasswordInput {
+                    path_prefix: PATH_PREFIX.with(|val| val.to_string()),
                     page: page.clone(),
                     theme: theme.clone(),
                     id,
@@ -95,6 +97,7 @@ pub async fn get<E>(
         };
 
         let paste = Paste {
+            path_prefix: PATH_PREFIX.with(|val| val.to_string()),
             page: page.clone(),
             key,
             theme: theme.clone(),
diff --git a/crates/wastebin_server/src/handlers/html/qr.rs b/crates/wastebin_server/src/handlers/html/qr.rs
@@ -7,7 +7,7 @@ use url::Url;
 use crate::cache::Key;
 use crate::handlers::extract::{Theme, Uid};
 use crate::handlers::html::{ErrorResponse, make_error};
-use crate::{Error, Page};
+use crate::{Error, PATH_PREFIX, Page};
 use wastebin_core::db::Database;
 use wastebin_core::db::read::Metadata;
 use wastebin_core::expiration::Expiration;
@@ -42,6 +42,7 @@ pub async fn get(
             .is_some_and(|(Uid(user_uid), owner_uid)| user_uid == owner_uid);
 
         Ok(Qr {
+            path_prefix: PATH_PREFIX.with(|val| val.to_string()),
             page: page.clone(),
             theme: theme.clone(),
             key,
@@ -60,6 +61,7 @@ pub async fn get(
 #[derive(Template, WebTemplate)]
 #[template(path = "qr.html", escape = "none")]
 pub(crate) struct Qr {
+    path_prefix: String,
     page: Page,
     theme: Option<Theme>,
     key: Key,
diff --git a/crates/wastebin_server/src/handlers/raw.rs b/crates/wastebin_server/src/handlers/raw.rs
@@ -4,7 +4,7 @@ use axum::response::{IntoResponse, Response};
 use crate::cache::Key;
 use crate::handlers::extract::{Password, Theme};
 use crate::handlers::html::{ErrorResponse, PasswordInput, make_error};
-use crate::{Database, Page};
+use crate::{Database, PATH_PREFIX, Page};
 use wastebin_core::db;
 use wastebin_core::db::read::Entry;
 
@@ -23,6 +23,7 @@ pub async fn get(
         match db.get(key.id, password).await {
             Ok(Entry::Regular(data) | Entry::Burned(data)) => Ok(data.text.into_response()),
             Err(db::Error::NoPassword) => Ok(PasswordInput {
+                path_prefix: PATH_PREFIX.with(|val| val.to_string()),
                 page: page.clone(),
                 theme: theme.clone(),
                 id: key.id.to_string(),
diff --git a/crates/wastebin_server/src/main.rs b/crates/wastebin_server/src/main.rs
@@ -23,6 +23,7 @@ use http::header::{
     X_XSS_PROTECTION,
 };
 use tokio::net::{TcpListener, UnixListener};
+use tokio::task_local;
 use tower::ServiceBuilder;
 use tower_http::compression::CompressionLayer;
 use tower_http::timeout::TimeoutLayer;
@@ -34,6 +35,10 @@ use crate::handlers::extract::Theme;
 use crate::handlers::{delete, download, html, insert, raw, robots, theme};
 use wastebin_core::db::Database;
 
+task_local! {
+    pub static PATH_PREFIX: String;
+}
+
 /// Reference counted [`page::Page`] wrapper.
 pub(crate) type Page = Arc<page::Page>;
 
@@ -79,6 +84,17 @@ impl FromRef<AppState> for Cache {
     }
 }
 
+async fn path_prefix_layer(req: Request, next: Next) -> Response {
+    let prefix = req
+        .headers()
+        .get("x-forwarded-prefix")
+        .and_then(|val| val.to_str().ok())
+        .unwrap_or("")
+        .to_string();
+
+    PATH_PREFIX.scope(prefix, next.run(req)).await
+}
+
 async fn security_headers_layer(req: Request, next: Next) -> impl IntoResponse {
     const SECURITY_HEADERS: [(HeaderName, HeaderValue); 7] = [
         (SERVER, HeaderValue::from_static(env!("CARGO_PKG_NAME"))),
@@ -113,6 +129,7 @@ async fn handle_service_errors(
         StatusCode::PAYLOAD_TOO_LARGE => (
             StatusCode::PAYLOAD_TOO_LARGE,
             html::Error {
+                path_prefix: PATH_PREFIX.with(|val| val.to_string()),
                 page,
                 theme,
                 description: String::from("payload exceeded limit"),
@@ -122,6 +139,7 @@ async fn handle_service_errors(
         StatusCode::UNSUPPORTED_MEDIA_TYPE => (
             StatusCode::UNSUPPORTED_MEDIA_TYPE,
             html::Error {
+                path_prefix: PATH_PREFIX.with(|val| val.to_string()),
                 page,
                 theme,
                 description: String::from("unsupported media type"),
@@ -213,6 +231,7 @@ fn make_app(state: AppState, timeout: Duration, max_body_size: usize) -> Router
                     timeout,
                 ))
                 .layer(from_fn_with_state(state.clone(), handle_service_errors))
+                .layer(from_fn(path_prefix_layer))
                 .layer(from_fn(security_headers_layer)),
         )
         .with_state(state)
diff --git a/crates/wastebin_server/templates/base.html b/crates/wastebin_server/templates/base.html
@@ -7,26 +7,26 @@
     <title>{{ page.title }}{% block title_content %}{% endblock %}</title>
     {% match theme %}
       {% when Some with (Theme::Dark) %}
-        <link rel="stylesheet" href="{{ page.assets.css.dark.route() }}">
+      <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.dark.route() }}">
       {% when Some with (Theme::Light) %}
-        <link rel="stylesheet" href="{{ page.assets.css.light.route() }}">
+        <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.light.route() }}">
       {% when Some with (Theme::System) %}
-        <link rel="stylesheet" href="{{ page.assets.css.dark.route() }}" media="(prefers-color-scheme: dark)">
-        <link rel="stylesheet" href="{{ page.assets.css.light.route() }}" media="(prefers-color-scheme: light)">
+        <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.dark.route() }}" media="(prefers-color-scheme: dark)">
+        <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.light.route() }}" media="(prefers-color-scheme: light)">
       {% when None %}
-        <link rel="stylesheet" href="{{ page.assets.css.dark.route() }}" media="(prefers-color-scheme: dark)">
-        <link rel="stylesheet" href="{{ page.assets.css.light.route() }}" media="(prefers-color-scheme: light)">
+        <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.dark.route() }}" media="(prefers-color-scheme: dark)">
+        <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.light.route() }}" media="(prefers-color-scheme: light)">
     {% endmatch %}
-    <link rel="stylesheet" href="{{ page.assets.css.style.route() }}">
-    <link rel="icon" href="{{ page.assets.favicon.route() }}" type="image/png">
+    <link rel="stylesheet" href="{{ path_prefix }}{{ page.assets.css.style.route() }}">
+    <link rel="icon" href="{{ path_prefix }}{{ page.assets.favicon.route() }}" type="image/png">
     {% block head %}{% endblock %}
   </head>
   <body>
     <div id="main-container">
       <header>
         <div class="nav-group">
           <div class="nav-item">
-            <a href="/" class="nav-button" title="home" aria-label="home">
+            <a href="{{ path_prefix }}/" class="nav-button" title="home" aria-label="home">
               <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                 <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="m4 12 8-8 8 8M6 10.5V19a1 1 0 0 0 1 1h3v-3a1 1 0 0 1 1-1h2a1 1 0 0 1 1 1v3h3a1 1 0 0 0 1-1v-8.5"/>
               </svg>
@@ -40,30 +40,30 @@
           {% match theme %}
             {% when None %}
           <div class="nav-item" id="dark-switch">
-            <a href="/theme?pref=dark" class="nav-button" title="switch to dark" aria-label="switch to dark">
+            <a href="{{ path_prefix }}/theme?pref=dark" class="nav-button" title="switch to dark" aria-label="switch to dark">
               <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                 <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 21a9 9 0 0 1-.5-17.986V3c-.354.966-.5 1.911-.5 3a9 9 0 0 0 9 9c.239 0 .254.018.488 0A9.004 9.004 0 0 1 12 21Z"/>
               </svg>
             </a>
           </div>
             {% when Some with (Theme::System) %}
           <div class="nav-item" id="dark-switch">
-            <a href="/theme?pref=dark" class="nav-button" title="switch to dark" aria-label="switch to dark">
+            <a href="{{ path_prefix }}/theme?pref=dark" class="nav-button" title="switch to dark" aria-label="switch to dark">
               <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                 <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 21a9 9 0 0 1-.5-17.986V3c-.354.966-.5 1.911-.5 3a9 9 0 0 0 9 9c.239 0 .254.018.488 0A9.004 9.004 0 0 1 12 21Z"/>
               </svg>
             </a>
           </div>
             {% when Some with (Theme::Dark) %}
           <div class="nav-item" id="light-switch">
-            <a href="/theme?pref=light" class="nav-button" title="switch to light" aria-label="switch to light">
+            <a href="{{ path_prefix }}/theme?pref=light" class="nav-button" title="switch to light" aria-label="switch to light">
               <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                 <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 5V3m0 18v-2M7.05 7.05 5.636 5.636m12.728 12.728L16.95 16.95M5 12H3m18 0h-2M7.05 16.95l-1.414 1.414M18.364 5.636 16.95 7.05M16 12a4 4 0 1 1-8 0 4 4 0 0 1 8 0Z"/>
               </svg>
             </a>
           </div>
             {% when Some with (Theme::Light) %}
-          <div class="nav-item" id="system-switch"> <a href="/theme?pref=system" class="nav-button" title="switch to system" aria-label="switch to system">
+          <div class="nav-item" id="system-switch"> <a href="{{ path_prefix }}/theme?pref=system" class="nav-button" title="switch to system" aria-label="switch to system">
               <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
                 <path stroke="currentColor" stroke-linecap="square" stroke-linejoin="round" stroke-width="2" d="M10 19H5a1 1 0 0 1-1-1v-1a3 3 0 0 1 3-3h2m10 1a3 3 0 0 1-3 3m3-3a3 3 0 0 0-3-3m3 3h1m-4 3a3 3 0 0 1-3-3m3 3v1m-3-4a3 3 0 0 1 3-3m-3 3h-1m4-3v-1m-2.121 1.879-.707-.707m5.656 5.656-.707-.707m-4.242 0-.707.707m5.656-5.656-.707.707M12 8a3 3 0 1 1-6 0 3 3 0 0 1 6 0Z"/>
               </svg>
diff --git a/crates/wastebin_server/templates/burn.html b/crates/wastebin_server/templates/burn.html
@@ -2,7 +2,7 @@
 {% block content %}
 <div class="flex-center">
   <div>
-    Copy and send <a class="text-link" href="/{{ key }}">this link</a>. After opening it for the first time, it will be deleted.
+    Copy and send <a class="text-link" href="{{ path_prefix }}/{{ key }}">this link</a>. After opening it for the first time, it will be deleted.
   </div>
   <div>
     <svg xmlns="http://www.w3.org/2000/svg" version="1.1" viewBox="0 0 {{ code.size() + 4 }} {{ code.size() + 4 }}" stroke="none" width="16rem">
diff --git a/crates/wastebin_server/templates/encrypted.html b/crates/wastebin_server/templates/encrypted.html
@@ -2,7 +2,7 @@
 
 {% block content %}
   <div class="flex-center">
-    <form action="/{{ id }}" method="post">
+    <form action="{{ path_prefix }}/{{ id }}" method="post">
       <div class="controls">
         <div class="controls-row">
           <input type="password" id="password" name="password" placeholder="Password ..." autofocus>
diff --git a/crates/wastebin_server/templates/error.html b/crates/wastebin_server/templates/error.html
@@ -2,6 +2,6 @@
 {% block content %}
   <div class="flex-center">
     <p>😢 {{ description }}</p>
-    <p><a class="text-link" href="/">go back</a></p>
+    <p><a class="text-link" href="{{ path_prefix }}/">go back</a></p>
   </div>
 {% endblock %}
diff --git a/crates/wastebin_server/templates/formatted.html b/crates/wastebin_server/templates/formatted.html
@@ -41,6 +41,6 @@
   </div>
   {{ html|safe }}
   {% if !is_available %}
-  <script defer src="{{ page.assets.burn_js.route()}}"></script>
+  <script defer src="{{ path_prefix }}{{ page.assets.burn_js.route()}}"></script>
   {% endif %}
 {% endblock %}
diff --git a/crates/wastebin_server/templates/index.html b/crates/wastebin_server/templates/index.html
@@ -15,7 +15,7 @@
 {% endblock %}
 
 {%- block content -%}
-    <form id="form" action="/new" method="post">
+    <form id="form" action="{{ path_prefix }}/new" method="post">
       <div class="container">
         <div class="content">
           <textarea id="text" name="text" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" placeholder="<paste text or drop file here>" autofocus required></textarea>
diff --git a/crates/wastebin_server/templates/paste.html b/crates/wastebin_server/templates/paste.html
@@ -19,22 +19,22 @@
   {% if is_available %}
   {% if can_delete %}
     <div class="nav-item">
-      <a href="/delete/{{ key.id() }}" class="nav-button" title="delete paste" aria-label="delete paste">
+      <a href="{{ path_prefix }}/delete/{{ key.id() }}" class="nav-button" title="delete paste" aria-label="delete paste">
         <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
           <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 7h14m-9 3v8m4-8v8M10 3h4a1 1 0 0 1 1 1v3H9V4a1 1 0 0 1 1-1ZM6 7h12v13a1 1 0 0 1-1 1H7a1 1 0 0 1-1-1V7Z"/>
         </svg>
       </a>
     </div>
   {% endif %}
     <div class="nav-item">
-        <a href="/dl/{{ key }}" class="nav-button" title="download file" aria-label="download file">
+      <a href="{{ path_prefix }}/dl/{{ key }}" class="nav-button" title="download file" aria-label="download file">
         <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
           <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 13V4M7 14H5a1 1 0 0 0-1 1v4a1 1 0 0 0 1 1h14a1 1 0 0 0 1-1v-4a1 1 0 0 0-1-1h-2m-1-5-4 5-4-5m9 8h.01"/>
         </svg>
       </a>
     </div>
     <div class="nav-item">
-      <a href="/raw/{{ key }}" class="nav-button" title="display raw file" aria-label="display raw file">
+      <a href="{{ path_prefix }}/raw/{{ key }}" class="nav-button" title="display raw file" aria-label="display raw file">
         <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
           <path stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M10 3v4a1 1 0 0 1-1 1H5m5 4-2 2 2 2m4-4 2 2-2 2m5-12v16a1 1 0 0 1-1 1H6a1 1 0 0 1-1-1V7.914a1 1 0 0 1 .293-.707l3.914-3.914A1 1 0 0 1 9.914 3H18a1 1 0 0 1 1 1Z"/>
         </svg>
@@ -52,7 +52,7 @@
 {% block nav_specific %}
   {% if is_available %}
     <div class="nav-item">
-      <a href="/qr/{{ key }}" class="nav-button" title="qr code" aria-label="qr code">
+      <a href="{{ path_prefix }}/qr/{{ key }}" class="nav-button" title="qr code" aria-label="qr code">
         <svg aria-hidden="true" xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none" viewBox="0 0 24 24">
           <path stroke="currentColor" stroke-linejoin="round" stroke-width="2" d="M4 4h6v6H4V4Zm10 10h6v6h-6v-6Zm0-10h6v6h-6V4Zm-4 10h.01v.01H10V14Zm0 4h.01v.01H10V18Zm-3 2h.01v.01H7V20Zm0-4h.01v.01H7V16Zm-3 2h.01v.01H4V18Zm0-4h.01v.01H4V14Z"/>
           <path stroke="currentColor" stroke-linejoin="round" stroke-width="2" d="M7 7h.01v.01H7V7Zm10 10h.01v.01H17V17Z"/>
