pdk-cors-lib 1.7.0

PDK CORS Library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134

// Copyright (c) 2026, Salesforce, Inc.,
// All rights reserved.
// For full license text, see the LICENSE.txt file

use pdk_core::logger;

use crate::error::CorsError;
use crate::model::cors::CorsResourceTypeEnum;
use crate::model::resource::protected_resource::ResponseType;

///
/// Defines a CORS Resource
///
pub trait CorsResource {
    fn main_request(&self, rt: &MainRequest) -> Result<ResponseType, CorsError>;
    fn simple_request(&self, rt: &SimpleRequest) -> Result<ResponseType, CorsError>;
    fn no_cors_request(&self, rt: &NoCorsRequest) -> Result<ResponseType, CorsError>;
    fn preflight_request(&self, rt: &PreflightRequest) -> Result<ResponseType, CorsError>;
}

///
/// Defines a CORS Request and it's ability to access a defined resource taken from configuration.
///
pub trait CorsRequestType {
    fn access_resource(&self, visitor: &CorsResourceTypeEnum) -> Result<ResponseType, CorsError>;
}

#[derive(Debug, PartialEq, Eq)]
pub struct MainRequest {
    origin: String,
}

#[derive(Debug, PartialEq, Eq)]
pub struct SimpleRequest {
    origin: String,
}

#[derive(Debug, Default, PartialEq, Eq)]
pub struct PreflightRequest {
    origin: String,
    request_method: String,
    request_headers: Vec<String>,
}

#[derive(Debug, Default, PartialEq, Eq)]
pub struct NoCorsRequest {}

impl MainRequest {
    pub(crate) fn new(origin: &str) -> Self {
        Self {
            origin: origin.to_string(),
        }
    }

    pub(crate) fn origin(&self) -> &String {
        &self.origin
    }
}

impl SimpleRequest {
    pub(crate) fn new(origin: &str) -> Self {
        Self {
            origin: origin.to_string(),
        }
    }

    pub(crate) fn origin(&self) -> &String {
        &self.origin
    }
}

impl PreflightRequest {
    pub(crate) fn new(origin: &str, request_method: &str, request_headers: &[String]) -> Self {
        Self {
            origin: origin.to_string(),
            request_method: request_method.to_string(),
            request_headers: request_headers.to_vec(),
        }
    }

    pub(crate) fn origin(&self) -> &str {
        &self.origin
    }

    pub(crate) fn method(&self) -> &str {
        self.request_method.as_str()
    }

    pub(crate) fn headers(&self) -> &[String] {
        self.request_headers.as_slice()
    }
}

///
/// A CORS Main Request is any request that does not meet the Simple Request requirements nor
/// is a Preflight Request.
///
impl CorsRequestType for MainRequest {
    fn access_resource(&self, visitor: &CorsResourceTypeEnum) -> Result<ResponseType, CorsError> {
        logger::debug!("Processing incoming request as Main CORS Request");
        visitor.main_request(self)
    }
}

///
/// A CORS Simple Request is any request that meet the following three requirements:
///
/// - MUST be one of the following methods: GET, PUT, HEAD
/// - MUST contain a specific set of headers. Refer to <link_to_class> to have the list.
/// - In case of Content-Type header, it MUST have a set of values. Refer to <link_to_class>
///
impl CorsRequestType for SimpleRequest {
    fn access_resource(&self, visitor: &CorsResourceTypeEnum) -> Result<ResponseType, CorsError> {
        logger::debug!("Processing incoming request as Simple CORS Request");
        visitor.simple_request(self)
    }
}

///
/// A No CORS Request is any request that does not contain the Origin header in its attributes.
///
impl CorsRequestType for NoCorsRequest {
    fn access_resource(&self, visitor: &CorsResourceTypeEnum) -> Result<ResponseType, CorsError> {
        logger::debug!("Processing incoming request as No CORS Request");
        visitor.no_cors_request(self)
    }
}

impl CorsRequestType for PreflightRequest {
    fn access_resource(&self, visitor: &CorsResourceTypeEnum) -> Result<ResponseType, CorsError> {
        logger::debug!("Processing incoming request as Preflight CORS Request");
        visitor.preflight_request(self)
    }
}