favicon here hometagsblogmicrobio cvtech cvgpg keys

Part 6: So I am building a fullstack project

#mercado-series #rust #typescript #deno #fresh #fullstack

Soc Virnyl Estela | 2026-03-23T00:19:10Z | reading time: ~3min

For the past few days of improving backend and experimenting axum with utoipa, I came to a conclusion that you can offload core logic to regular functions for reuse.

Here is a Rust pseudocode of what I mean

pub fn login(
	State(state): State<Arc<AppState>>,
	Json(login_details): Json<UserLoginRequest>
) -> Result<axum::response::Response, StatusCode> {
	let user = login_service(login_details).await.map_err(|err| {
		tracing::error!(?err);
		StatusCode::INTERNAL_SERVER_ERROR
	})?;
	Ok(Json(user).into_response())
}

Currently, my code smell is actually passing the functions that process form data to a function that process json data when I was experimenting form based logins with reverse-proxy and it hit me—I should separate core business logic when handling data. Oh well, I'll be on a huge refactor, mostly separating similar logic into a services module so I won't repeat myself.

I also encountered a bug in utoipa of which is not very obvious at first. The workaround is ensuring that functions with the same paths have different namings.

For example, if you have function in public and admin modules that handle logins, instead of naming them both as login, name them separately as public_login and admin_login. Another workaround I have was hard-coding the paths.

I actually combined both and I think I rather do the former since I think nesting should be reused here.

However, the latter is still problematic as it is affected by the same bug if you accidentally rename the functions to the same name so /admin/login and /api/login are merged as either /admin/login or /api/login whichever comes first when generating the openapi data.

So why talk about form data?

I recently came across the usage of the formaction attribute. It's basically href but sends a form data request to the target path. Hence, I've been experimenting using caddy to reverse-proxy both my frontend and backend to a common URL e.g. https://localhost:8888.

The downside is that, I won't be doing manual fetch in the frontend client, meaning, this approach is unable to use JSON as a request body for requests in the backend.

Another downside is I am not able to use the routes that use JSON as the request body.

However, I believe that the upsides far outweigh the downsides because we can always create a toggle for the frontend to use the JSON based routes. Another upside is the refactor, which means it's easy to swap Form<T> to JSON<T>.

That's all for this project's update. I think I'll be taking a 1 day break from it. Too tired since yesterday.

Articles from blogs I follow around the net

Upload a local demo to Codepen

via Rob O'Leary | BlogMarch 18, 2026

I haven't made anything with AT Proto yet

I haven't made anything with AT Proto.Okay, technically, I did made the Bluesky ThinkUp Tribute, which syncs with your Bluesky account and sends a nightly email about who changed their bio or handle on the website. It's a great little utility and I rely on…

via macwright.comMarch 16, 2026

[WFD 37] diffusion models are amazing

diffusion LLMs are fast, weird, and break every prompting rule i thought i knew. here's what i learned trying to make one behave.

via Ryana May Que — Writings for DiscussionMarch 12, 2026

Cryptography Engineering Has An Intrinsic Duty of Care

To understand my point, I need to first explain three different cryptography attack papers / blog posts. I promise this won’t be boring. Three Little Disclosures Misuse-Prone Ciphers For All In a blog post titled Carelessness versus craftsmanship in crypto…

via Dhole MomentsFebruary 25, 2026

What’s That String? That Time a Weird String Revealed a Whole Operation

How it felt to work on this post. Shikanoko Nokonoko Koshitantan is written by Takashi Aoshima and published by Wit Studio. It all started with a slack message from boB Rudis: “Hey, I keep seeing this string. Any ideas?” d2=%3D%3DQXisTKpcCd4RnLsF3ckN3LlR…

via GreyNoise LabsFebruary 24, 2026

Designing Odin's Casting Syntax

Odin;s declaration syntax becomes second nature to everyone who uses the language but I do sometimes get asked ;Why are there two ways to do type conversions?; Enough that I had to make an FAQ entry..The reason that there are two ways to do type conversio…

via gingerBill - ArticlesFebruary 23, 2026

Status update, February 2026

Hi all! Lars has contributed an implementation independent test suite for the scfg configuration file format. This is quite nice for implementors, they get a base test suite for free. I’ve added support for it for libscfg, the C implementation. I’ve spent …

via emersionFebruary 21, 2026

Investigating the SuperNote Notebook Format

I'm a big fan of eink tablets. I read a lot, I write a lot, I prefer handwritten notes, it's a match made in heaven. I've been using a Kindle Scribe for the past several years - I probably used it as much or more than my phone. Recently, I upgraded to a Su…

via Cracking the ShellFebruary 20, 2026

Luxe, ocaml et volupté

Luxe, ocaml et volupté by Clément Delafargue on February 16, 2026 Tagged as: ocaml. After a couple years using rust as my primary language, I’ve got a new job where I’m using a variety of languages (including rust and typescript), but mostly go 1. So…

via Clément Delafargue - RSS feedFebruary 16, 2026

How To Add DRM To Your Backend (easy) [2026 WORKING]

How KineMaster stopped some modded clients from accessing their asset market

via maia blogFebruary 14, 2026

Push comes to shove tools

Your tools are extensions of your skills

via Ishan WritesFebruary 09, 2026

The cults of TDD and GenAI

I’ve gotten a lot of flack throughout my career over my disdain towards test-driven development (TDD). I have met a lot of people who swear by it! And, I have also met a lot of people who insisted that I adopt it, too, often with the implied threat of appe…

via Drew DeVault's blogJanuary 29, 2026

2025 in review

Come along with me as I review the past year. Heh, I often start these kinds of posts right at the start of the year, but it takes a few weeks longer than I ever expect to think them through.1 Two years of being independent After a second year of operati…

via seanmonstarJanuary 27, 2026

The Birthday Paradox, simulated

I'm a fan of simulating counterintuitive statistics. I recently did this with the Monty Hall problem and I really enjoyed how it turned out. A similarly interesting statistical puzzle is the birthday paradox: you only need to get 23 people in a room a room…

via pcloadletterJanuary 23, 2026

Merry Christmas, Ya Filthy Animals (2025)

It’s my last day of writing for the year, so I’m going to try keep this one quick – it was knocked out over three hours, so I hope you can forgive me if it’s a bit clumsier than my usual writing. For some strange reason, one of the few clear memories I hav…

via LudicityDecember 27, 2025

Yep, Passkeys Still Have Problems

It's now late into 2025, and just over a year since I wrote my last post on Passkeys. The prevailing dialogue that I see from thought leaders is "addressing common misconceptions" around Passkeys, the implication being that "you just don't understand it co…

via Firstyear's blog-a-logDecember 17, 2025

Hacking the World Poker Tour: Inside ClubWPT Gold’s Back Office

In June, 2025, Shubs Shah and I discovered a vulnerability in the online poker website ClubWPT Gold which would have allowed an attacker to fully access the core back office application that is used for all administrative site functionality.

via Blog | Sam CurryOctober 12, 2025

Testing multiple versions of Python in parallel

Daniel Roy Greenfeld wrote about how to test your code for multiple versions of Python using `uv`. I follow up with a small improvement to the Makefile.

via Technically PersonalJuly 21, 2025

Generated by openring-rs

favicon here hometagsblogmicrobio cvtech cvgpg keys