Struct Cors 

pub struct Cors { /* private fields */ }

CORS middleware

Appends CORS response headers and short-circuits OPTIONS preflight requests with a 204 No Content response. Use Cors::permissive() for open APIs or Cors::new() + builder methods for origin-restricted endpoints.

Implementations

impl Cors

pub fn permissive() -> Self

Create a new Cors with permissive defaults

Allows all origins (*), GET/POST/OPTIONS methods, and Content-Type/Accept headers.

pub fn new() -> Self

Create a new Cors builder with no allowed origins

Call allow_origins to configure allowed origins.

pub fn allow_origins<I, S>(self, origins: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Set the list of allowed origins

Example

Cors::new().allow_origins(vec!["https://example.com", "https://app.example.com"])

pub fn allow_methods<I, S>(self, methods: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Set the allowed HTTP methods

pub fn allow_headers<I, S>(self, headers: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Set the allowed request headers

pub fn max_age(self, seconds: u32) -> Self

Set the preflight cache duration in seconds (default: 86400)

Trait Implementations

impl Default for Cors

fn default() -> Self

Returns the “default value” for a type.

impl Middleware for Cors

fn handle<'life0, 'async_trait>( &'life0 self, request: Request, next: Next, ) -> Pin<Box<dyn Future<Output = Response> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Handle the request