Struct MiddlewareStack 

pub struct MiddlewareStack { /* private fields */ }

Implementations

impl MiddlewareStack

pub fn new() -> Self

pub fn with_csrf(self) -> Self

Enable CSRF protection (double-submit cookie): state-changing requests must send an X-CSRF-Token header matching the csrf_token cookie.

pub fn with_force_ssl(self) -> Self

Redirect insecure requests to HTTPS (Rails force_ssl). A request is considered secure when its X-Forwarded-Proto is https (or the URI scheme is https); otherwise it gets a 301 to the https:// URL.

pub fn insert_before( self, transform: impl FnOnce(Router) -> Router + Send + 'static, ) -> Self

Insert custom middleware inside the always-on layers (closer to the router), i.e. it runs after logging/panic-recovery on the way in. The closure receives the router and returns it with its .layer(...) added.

pub fn insert_after( self, transform: impl FnOnce(Router) -> Router + Send + 'static, ) -> Self

Insert custom middleware outside the always-on layers (outermost), so it wraps the whole stack.

pub fn with_cors(self) -> Self

Enable permissive CORS (any origin/method/header). For fine-grained, config-driven CORS use with_cors_config.

pub fn with_cors_config(self, config: CorsConfig) -> Self

Enable CORS from parsed CorsConfig (spec 07 [middleware.cors]). A config with enabled: false is ignored, keeping CORS opt-in.

pub fn with_allowed_hosts(self, hosts: Vec<String>) -> Self

Restrict requests to an allowlist of Host header values (Rails config.hosts / ActionDispatch::HostAuthorization). An empty list permits any host; a request whose host is not listed gets a 403.

pub fn apply(self, router: Router) -> Router

Trait Implementations

impl Default for MiddlewareStack

fn default() -> Self

Returns the “default value” for a type.