clockworklabs / clockworklabs/SpacetimeDB
Allow HTTP POST requests to use compression
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 25.2k
- Forks
- 1.1k
- Avg merge
- 2d 7h
- Merged PRs (30d)
- 46
Description
We've recently discovered that there's a post body maximum size of 2MB. We'd like to increase this value, but there are some security implications to doing this: https://docs.rs/axum/latest/axum/extract/index.html#request-body-limits
So, another way we can allow users to invoke reducers with large parameters would be to use compression. Since these are calls over the HTTP interface and not through websockets we care less about performance so we could go with something that yields a higher compression ratio.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the HTTP POST request handling and request-body limits in the axum-based HTTP interface. Determine how compressed request bodies should be accepted safely, then verify that reducers with parameters larger than the current limit can be invoked without weakening the stated security protections.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- api, backend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100