Francis

get "/hello", fn _ -> %{hello: :world} end
get "/:name", fn %{params: params} -> params["name"] end
post "/", fn conn -> conn.body_params end

Returns strings as HTML, maps as JSON. URL params, body, and the raw conn always available.

ws "/chat", fn
  :join, socket -> {:reply, "welcome"}
  {:received, msg}, _ -> {:reply, msg}
end

Pattern match on join, close, and incoming messages. Heartbeat and frame size limits included.

sse "/events", fn
  :join, socket -> {:reply, socket.id}
  {:received, m}, _ -> {:reply, m}
end

Push from any process via send/2. Named events, retry, and keepalive managed for you.

use Francis, static: [ from: "priv/static", at: "/" ]

Serve from disk with gzip. Run mix francis.digest for content-hashed filenames and a cache manifest.

plug Francis.Plug.SecureHeaders
plug Francis.Plug.CSP, directives: %{script_src: ["'self'"]}
safe_html conn, user_content  # auto-escapes <>&"'

Secure headers and CSP with safe defaults. Open redirects blocked in response helpers by design.

plug Plug.BasicAuth, username: "user", password: "pass"
plug Plug.Logger
plug MyApp.RateLimiter

Any standard Plug middleware works. No lock-in, no adapters needed.