Module acl 

Contains the HttpAcl, HttpAclBuilder, and related types.

Each category an HttpAcl checks (scheme, method, host, port, IP, header, URL path) is evaluated the same way: the allow-list is checked first, then the deny-list, and if neither matches, the category’s configured default (set via e.g. HttpAclBuilder::host_acl_default) decides the outcome. The allow-list always wins over the deny-list, so a broad allow entry can shadow a narrower deny entry in the same category. Every check returns an AclClassification rather than a plain bool, so callers can tell why something was allowed or denied; use AclClassification::is_allowed/AclClassification::is_denied where only the outcome matters.

Structs

HttpAcl

Represents an HTTP ACL.

HttpAclBuilder

A builder for HttpAcl.

HttpAclHooks

The runtime hooks attached to an HttpAcl at build time, via HttpAclBuilder::build_full/HttpAclBuilder::try_build_full.

Enums

AclClassification

Represents the outcome of an ACL check, and why it was reached.

HttpRequestMethod

Represents an HTTP request method.

Type Aliases

ValidateFn

A function that validates an HTTP request against an ACL.