MySQL session store

libs/deny.toml

@@ -11,6 +11,11 @@ ignore = [
     # `paste` is unmaintained, but it's a small utility for macro-writing.
     # There are no known vulnerabilities, so we'll ignore the advisory for now.
     "RUSTSEC-2024-0436",
+    # `rsa` crate has a timing sidechannel vulnerability (Marvin Attack)
+    # but it's a transitive dependency through sqlx-mysql and no safe upgrade
+    # is available. The risk is acceptable for server-side usage where timing
+    # attacks are difficult to execute.
+    "RUSTSEC-2023-0071",
 ]
 
 [licenses]

libs/pavex_session_sqlx/Cargo.toml

@@ -11,6 +11,7 @@ version.workspace = true
 [features]
 default = []
 postgres = ["sqlx/postgres", "jiff-sqlx/postgres"]
+mysql = ["sqlx/mysql", "sqlx/runtime-tokio-rustls"]
 sqlite = ["sqlx/sqlite", "sqlx/runtime-tokio-rustls"]
 
 [package.metadata.docs.rs]
@@ -34,6 +35,6 @@ px_workspace_hack = { version = "0.1", path = "../px_workspace_hack" }
 [dev-dependencies]
 pavex_session_sqlx = { path = ".", features = ["postgres", "sqlite"] }
 pavex_tracing = { path = "../pavex_tracing" }
-tokio = { workspace = true, features = ["rt-multi-thread", "time"] }
+tokio = { workspace = true, features = ["rt-multi-thread", "time", "macros"] }
 tempfile = { workspace = true }
 uuid = { workspace = true, features = ["v4"] }

libs/pavex_session_sqlx/src/lib.rs

@@ -6,6 +6,7 @@
 //! There is a dedicated feature flag for each supported database backend:
 //!
 //! - `postgres`: Support for PostgreSQL.
+//! - `mysql`: Support for MySQL.
 //! - `sqlite`: Support for SQLite.
 
 #[cfg(feature = "postgres")]
@@ -17,6 +18,15 @@ pub mod postgres;
 #[doc(inline)]
 pub use postgres::PostgresSessionStore;
 
+#[cfg(feature = "mysql")]
+#[cfg_attr(docsrs, doc(cfg(feature = "mysql")))]
+pub mod mysql;
+
+#[cfg(feature = "mysql")]
+#[cfg_attr(docsrs, doc(cfg(feature = "mysql")))]
+#[doc(inline)]
+pub use mysql::MySqlSessionStore;
+
 #[cfg(feature = "sqlite")]
 #[cfg_attr(docsrs, doc(cfg(feature = "sqlite")))]
 pub mod sqlite;