Struct CorsConfig 

pub struct CorsConfig {
    pub enabled: bool,
    pub allow_any_origin: bool,
    pub allowed_origins: Vec<String>,
    pub allow_credentials: bool,
}

Fields

enabled: bool

Enable CORS middleware

allow_any_origin: bool

Allow all origins (*). If false, use allowed_origins list SECURITY WARNING: Setting this to true (default) allows ANY website to make requests This is a CVSS 6.5 vulnerability if you plan to access the API from browsers For production with web frontend, set to false and specify allowed_origins

allowed_origins: Vec<String>

List of allowed origins (only used if allow_any_origin is false) Example: [“https://app.example.com”, “https://dashboard.example.com”]

allow_credentials: bool

Allow credentials (cookies, authorization headers) in CORS requests SECURITY: Should be false if allow_any_origin is true

Trait Implementations

impl Clone for CorsConfig

fn clone(&self) -> CorsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CorsConfig

where CorsConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CorsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.