hgzimmerman / bucketquestions Goto Github PK

6.0 6.0 1.0 2 MB

A webapp written entirely in Rust for a dumb party game.

License: MIT License

Rust 82.83% PLpgSQL 0.31% Nix 0.21% HTML 0.73% CSS 0.94% TypeScript 12.16% JavaScript 0.05% Dockerfile 0.07% Shell 1.76% TSQL 0.94%

bucketquestions's People

Contributors

Stargazers

Watchers

Forkers

azurecloudmonk

bucketquestions's Issues

Switch to drawer navigation instead of menus.

Add Permissions UI

Create an interface for setting the bucket permissions based on what permissions you have
Create an interface for granting permissions if you have that permission.

Set up testing infrastructure

Add created_at, and possibly changed_at columns to many db types.

Then use them for order operations on queries.

Add privacy policy page

Don't expose ports to db

Test everything

Use the unit/integration agnostic test suite for the db crate
Adopt the testing indirection to account for PooledConn.
Use the modified test suite for business logic in the server crate.
Use the modified test suite for routing tests.

Set up domain name.

Clean up NavBar implementation

Remove the hamburger menu on the home page.
Remove the hamburger menu on the create bucket page, and offer a Home button instead.
Use a custom navbar for each page.

Rewrite in Yew

Yew 0.10.0 is good enough to use now, replace the react frontend with one written in Yew.

Add loading spinner w/delay

The current practice of immediately putting loading text is jarring. https://material-ui.com/demos/progress/

Deploy to AWS

Add a private flag to the buckets.

If a bucket is private, even if they know the slug, someone not already in the bucket can't access the bucket.

Switch to Public + Exclusive instead of Visible + Private for bucket permissions.

Public: anyone can access and see in public feeds.
Exclusive: only those who have joined can access

Come up with a scheme for managing CSRF tokens for Google OAuth

Requirements:

Store CSRF token from /auth/link, so it can be used in the /auth/redirect.
Store multiple, for concurrent logins, have a lookup mechanism to see if CSRF from /auth/redirect is in the set produced by /auth/link.
Ideally non-blocking, but can be slow.
Bounded max-size, of cache or max-time for items in cache.
Should be resilient to dos attacks within reason.

Candidates:

Non-locking FIFO HashSet? I don't think that this exists, nor makes that much sense as a datastructure
TimedCache https://docs.rs/cached/0.8.0/cached/stores/struct.TimedCache.html Good choice, but will require a lock.
AtomicRingBuffer https://docs.rs/atomicring/1.2.2/atomicring/struct.AtomicRingBuffer.html exists, but would be painfully slow to iterate through all elements to search for a token.
Single producer/ single consumer RingBuffer https://docs.rs/rb/0.3.2/rb/struct.SpscRb.html
- This has write_blocking functions and a get function that fills another buffer to be searched through.
- I think this could be made to work, but would be clunky.
RwLock<RingBuffer> https://docs.rs/circular-queue/0.2.0/circular_queue/ Pragmatic, but possibly slow