Rust Full-Stack Web Development Patterns

Tech Stack

Layer Tech

Frontend Leptos (Rust→WASM CSR), Tailwind CSS + DaisyUI

Backend Axum, SQLx (compile-time checked queries)

Database PostgreSQL

Build Trunk (WASM), Docker, Makefile

JWT Dual-Token Auth

Access Token (short-lived) → API request auth Refresh Token (long-lived) → Access token renewal

• Store in HTTP-only Cookie (XSS protection)

• Backend: Token validation

• Frontend: Auto-retry on 401

// Backend: Cookie setup let cookie = format!( "access_token={}; HttpOnly; Secure; SameSite=Strict; Path=/; Max-Age={}", token, 900 // 15 min );

// Frontend: 401 retry if response.status() == 401 { refresh_token().await?; // Retry original request }

Frontend State Management

provide_context(AuthContext::new()); provide_context(AppCache::new()); // TTL-based cache provide_context(ToastContext::new());

// localStorage for preferences let stored = window().local_storage()?.get_item("preferences")?;

API Client Pattern

// Rate limiting (429) handling async fn fetch_with_retry<T>(request: impl Fn() -> Future<T>) -> Result<T> { loop { match request().await { Err(e) if e.status() == 429 => { let delay = e.retry_after().unwrap_or(1000); sleep(delay).await; } result => return result, } } }

// Token refresh queue (prevent multiple refreshes) static REFRESH_LOCK: OnceCell<RwLock<()>> = OnceCell::new();

Multi-tenant Routing

{tenant}.example.com → Tenant identification

fn extract_subdomain(host: &str) -> Option<String> { let parts: Vec<&str> = host.split('.').collect(); (parts.len() >= 3).then(|| parts[0].to_string()) }

async fn check_tenant_access(claims: &Claims, subdomain: &str) -> Result<(), AppError> { // Verify user has access to this tenant }

Database

// SQLx compile-time query checking let user = sqlx::query_as!( User, r#"SELECT id, name, role as "role: UserRole" FROM users WHERE id = $1"#, id ).fetch_one(&pool).await?;

// PostgreSQL ENUMs #[derive(sqlx::Type)] #[sqlx(type_name = "user_role", rename_all = "PascalCase")] pub enum UserRole { Admin, AreaManager, ServiceStation }

Common Commands

make dev # Start local environment make fmt # Format (cargo fmt + leptosfmt) make lint # Clippy checks make test # Run tests make migrate-run # Apply migrations

Dev Notes

Item Value

Backend port 3000

Local subdomain lvh.me (resolves to 127.0.0.1)

Env files .env.development , .env.staging , .env.production

Required env DATABASE_URL , JWT_SECRET , APP_ENV

Related Skills

• leptos-guide

• Leptos frontend

• axum-guide

• Axum backend

• sqlx-postgres

• SQLx + PostgreSQL