shoney.arickathil
ffd791d05b
- docs/examples/writeonce-serve -> docs/examples/porch (git mv, history kept); `[deps]` key and import are now `porch` / `porch/http` / `porch/router` - name history preserved on the library README, not rewritten into dated records: writeonce-framework -> writeonce-serve (08-25) -> porch (08-26). Stories, specs, plans and the audit reports keep the older name by the repo's own convention; only live docs and every path link were rewritten - left alone deliberately: `internal/serve.wo`, `pub fn serve`, `serve_conn`, `app.serve(...)` — those are functions, not the module name - web-app/wo.toml comment corrected: it claimed hyphens are not identifier characters and named a key this file never used. lexer.ml's `is_ident_cont` DOES accept `-` (an internal dash is part of the identifier, which is why binary minus needs spaces), so a hyphenated key would be legal too - site now teaches the name: package card, the two-deps chapter and the handlers-are-classes chapter say `porch`; site-accept asserted the old /packages/serve route and caught the rename, as a gate should - gates: web-app 46/0, site 21/0, deps-accept 8/0, oop-e2e 116/0, linkcheck 0 broken / 0 anchors; porch typechecks entry-less as kind=library Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
41 lines
1.4 KiB
Markdown
41 lines
1.4 KiB
Markdown
# web-app — the storefront sample
|
|
|
|
A small store: `Product`/`Order` as `@table` classes, JSON routes, one auth
|
|
middleware — built on [`porch`](../porch/), which
|
|
it imports **through `[deps]`** (iteration 15). This app is iteration 16's
|
|
acceptance workload: `just web-app` runs the whole chain — fetch → lock →
|
|
build → serve → curl matrix → restart persistence → SIGTERM.
|
|
|
|
## Routes
|
|
|
|
| Route | What |
|
|
| --- | --- |
|
|
| `GET /products` | list (JSON array) |
|
|
| `GET /products/:id` | one product or 404 |
|
|
| `POST /products` | create from a JSON body (`name`, `price`, `stock`); 400 on malformed JSON; 409 on a duplicate name (`@unique`) |
|
|
| `POST /orders` | create (`product`, `qty`); FK checked |
|
|
| `DELETE /products/:id` | 409 while orders reference it (FK restrict), 200 after |
|
|
|
|
Every request needs `authorization: Bearer <token>` (the auth middleware);
|
|
the token comes from the `WA_TOKEN` env var.
|
|
|
|
## Run
|
|
|
|
woc . # fetches deps, builds target/web-app
|
|
WA_TOKEN=secret WO_DATA=./data ./target/web-app 8080
|
|
|
|
## TLS / HTTP2
|
|
|
|
None here, deliberately: deploy behind nginx/caddy — the proxy terminates
|
|
TLS+ALPN and speaks h2 to browsers while this backend serves HTTP/1.1
|
|
keep-alive. Sketch:
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
http2 on;
|
|
location / {
|
|
proxy_pass http://127.0.0.1:8080;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
}
|
|
}
|