Struct HttpClient 

pub struct HttpClient { /* private fields */ }

HTTP client with allowlist-based access control.

Security Features

• URL allowlist enforcement
• Response size limits to prevent memory exhaustion
• Configurable timeouts to prevent hanging
• No automatic redirect following (to prevent allowlist bypass)

Implementations

impl HttpClient

pub fn new(allowlist: NetworkAllowlist) -> Self

Create a new HTTP client with the given allowlist.

Uses default security settings:

• 30 second timeout
• 10 MB max response size
• No automatic redirects

pub fn with_timeout(allowlist: NetworkAllowlist, timeout: Duration) -> Self

Create a client with custom timeout.

pub fn with_config( allowlist: NetworkAllowlist, timeout: Duration, max_response_bytes: usize, ) -> Self

Create a client with full configuration.

Arguments

• allowlist - URL patterns to allow
• timeout - Request timeout duration
• max_response_bytes - Maximum response body size (prevents memory exhaustion)

pub fn set_handler(&mut self, handler: Box<dyn HttpHandler>)

Set a custom HTTP handler for request interception.

The handler is called after the URL allowlist check, so the security boundary stays in bashkit. The default reqwest-based handler is used when no custom handler is set.

pub fn set_bot_auth(&mut self, config: BotAuthConfig)

Enable bot-auth request signing.

When set, all outbound HTTP requests are transparently signed with Ed25519 per RFC 9421 / web-bot-auth profile. No CLI arguments needed. Signing failures are non-blocking — the request is sent unsigned.

pub fn set_before_http(&mut self, hooks: Vec<Interceptor<HttpRequestEvent>>)

Set before_http interceptor hooks.

Hooks fire before each HTTP request (after allowlist check). They can inspect, modify, or cancel the request.

pub fn set_after_http(&mut self, hooks: Vec<Interceptor<HttpResponseEvent>>)

Set after_http interceptor hooks.

Hooks fire after each HTTP response is received. They can inspect or modify the response metadata.

pub async fn get(&self, url: &str) -> Result<Response>

Make a GET request.

pub async fn post(&self, url: &str, body: Option<&[u8]>) -> Result<Response>

Make a POST request with optional body.

pub async fn put(&self, url: &str, body: Option<&[u8]>) -> Result<Response>

Make a PUT request with optional body.

pub async fn delete(&self, url: &str) -> Result<Response>

Make a DELETE request.

pub async fn request( &self, method: Method, url: &str, body: Option<&[u8]>, ) -> Result<Response>

Make an HTTP request.

pub async fn request_with_headers( &self, method: Method, url: &str, body: Option<&[u8]>, headers: &[(String, String)], ) -> Result<Response>

Make an HTTP request with custom headers.

Security

• URL is validated against the allowlist before making the request
• Response body is limited to max_response_bytes to prevent memory exhaustion
• Redirects are not automatically followed (to prevent allowlist bypass)

pub async fn head(&self, url: &str) -> Result<Response>

Make a HEAD request to get headers without body.

pub fn max_response_bytes(&self) -> usize

Get the maximum response size in bytes.

pub async fn request_with_timeout( &self, method: Method, url: &str, body: Option<&[u8]>, headers: &[(String, String)], timeout_secs: Option<u64>, ) -> Result<Response>

Make an HTTP request with custom headers and per-request timeout.

This creates a temporary client with the specified timeout for this request only. If timeout_secs is None, uses the default client timeout.

Arguments

• method - HTTP method
• url - Request URL
• body - Optional request body
• headers - Custom headers
• timeout_secs - Overall request timeout in seconds (curl –max-time)

Security

• URL is validated against the allowlist before making the request
• Response body is limited to max_response_bytes to prevent memory exhaustion
• Redirects are not automatically followed (to prevent allowlist bypass)

pub async fn request_with_timeouts( &self, method: Method, url: &str, body: Option<&[u8]>, headers: &[(String, String)], timeout_secs: Option<u64>, connect_timeout_secs: Option<u64>, ) -> Result<Response>

Make an HTTP request with custom headers and separate connect/request timeouts.

This creates a temporary client with the specified timeouts for this request only.

Arguments

• method - HTTP method
• url - Request URL
• body - Optional request body
• headers - Custom headers
• timeout_secs - Overall request timeout in seconds (curl –max-time)
• connect_timeout_secs - Connection timeout in seconds (curl –connect-timeout)

Security

• URL is validated against the allowlist before making the request
• Response body is limited to max_response_bytes to prevent memory exhaustion
• Redirects are not automatically followed (to prevent allowlist bypass)