Architecture Deep Dive — ParkHub v4.8.0

[nash87]

Tech Stack

Rust Backend (Axum 0.8)

• Single binary deployment (~15 MB distroless)
• redb embedded key-value store (no external DB)
• 70+ compile-time feature flags
• 80 API modules, 125+ OpenAPI endpoints
• Argon2id password hashing
• GraphQL + REST dual API

Frontend (React 19 + Astro 6)

• 58 views, 12 design themes (OKLCH color system)
• Tailwind CSS 4.2 with container queries + scroll-driven animations
• 10 languages, 100% i18n coverage
• Framer Motion, View Transitions API
• PWA with offline support + background sync

New in v4.8.0

• QR Check-In/Out with live timer
• Swap Requests (trade spots between colleagues)
• Guest Parking Pass (shareable QR codes)
• Occupancy Heatmap (7x24 admin visualization)
• DESIGN.md comprehensive design system spec
• Open Graph + Twitter Card + JSON-LD SEO

Security

• httpOnly cookies + Bearer dual-auth
• 2FA/TOTP, OAuth (Google/GitHub), SAML/SSO
• API keys, login history, audit log
• RBAC with custom roles
• 0 CodeQL alerts
• GDPR/DSGVO compliant (9 frameworks audited)

Testing (1800+)

• Vitest: 782 tests (82 files)
• E2E Playwright: 117 pass (16 specs)
• Backend: 1794 unit tests
• k6 load tests, simulation engine
• Lighthouse CI, axe-core a11y

CI/CD

• GitHub Actions: fmt, check, clippy, test, deny, trivy, Lighthouse, E2E, CodeQL
• GHCR Docker images (distroless, multi-arch)
• Release: Linux + Windows binaries + checksums + attestation
• Dependabot auto-merge

Ask questions about any architectural decision!

[nash87]

mod.rs went from 8168 to 1503 lines across 3 extraction phases. All handler logic now in dedicated modules (system, users, admin, bookings, etc). Router only contains route definitions and shared middleware.

[nash87]

Updated for v4.13.0 — 2026-04-17

Major architecture shifts since this thread was written for v4.8.0:

• create_router decomposed: 1590 LOC → 244 LOC + 14 per-group helpers. Middleware stack layering preserved verbatim.
• db.rs split: 4530 LOC → 16 domain-oriented sub-files (users.rs, bookings.rs, lots.rs, vehicles.rs, absences.rs, settings.rs, audit_log.rs, communications.rs, translations.rs, visitors.rs, ev.rs, favorites.rs, sessions.rs, encryption.rs, tests.rs) via impl Database blocks per file.
• api/modules.rs split into api/modules/ tree: registry handlers gate schemas tests.
• main.rs split: 2576 LOC → 864 LOC + bootstrap/ (cli paths revocation seed health setup_wizard status_gui).
• Modular UX platform: 72-module registry + runtime toggle + per-module JSON Schema config editor, fully admin-UI-driven.
• JWT revocation store trait with InMemory + Redis impls, family rotation for refresh tokens.
• Per-identity rate limiter layered on per-IP tower_governor.

Full release notes: #331 · CHANGELOG: https://github.com/nash87/parkhub-rust/blob/main/CHANGELOG.md#4130---2026-04-17