tmk241/hemx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Localize Axum interaction forms

Browse Source
This commit is contained in:
tmk241
2026-09-01 23:50:26 +02:00
parent 42710354a6
commit 4559434068
6 changed files with 438 additions and 357 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PLAN.md
+3 -9
View File
@@ -40,16 +40,10 @@ Blocked by: HMX-M02
## HMX-M04 — Localize Axum interaction forms
Outcome: media-type enforcement, body limits, URL-encoded/multipart extraction, typed decoding, and rejections have one private Axum owner.
Outcome: the interaction-form boundary is privately owned without public extraction, decoding, limit, or rejection drift.
Delta: architecture/004 assurance/002
Path: HTTP request -> `InteractionRequest` extraction -> typed `Form<T>` or custom multipart model -> registered handler/rejection.
Build: move the complete form boundary with its tests; add compile coverage for documented `Form<T>` spellings and custom `FromInteractionForm` extraction.
Risk: extraction order, limits, rejection status/body, or public adapter signatures change.
Checks: `cargo test -p hemx-axum`; `cargo test -p hemx-derive`; focused URL-encoded, multipart, limit, rejection, and compile-pass/fail assertions; `redgate check`.
Non-goals: framework-owned CSRF/auth policy, a general extractor abstraction, or changing native form semantics.
Residual risk: none beyond the existing application-owned security policy boundary after focused route proof.
State: Ready
Checks: Axum interaction boundary suite; derive Form<T> spelling check; custom multipart typed extraction; Redgate; diff check; fresh review.
State: Done
Blocked by: none
## Closure