Struct CorsConfig 

#[non_exhaustive]
pub struct CorsConfig {
    pub origins: Vec<String>,
    pub methods: Vec<String>,
    pub headers: Vec<String>,
    pub max_age_secs: u64,
    pub allow_credentials: bool,
}

Configuration for CORS middleware.

When origins is empty (the default), the layer permits any origin (Access-Control-Allow-Origin: *) and forces allow_credentials to false — the CORS spec forbids * with credentials.

When one or more origins are specified, only those exact values are reflected back.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

origins: Vec<String>

Allowed origin URLs (e.g. ["https://example.com"]). Empty means allow any origin.

methods: Vec<String>

Allowed HTTP methods.

headers: Vec<String>

Allowed request headers.

max_age_secs: u64

Value for Access-Control-Max-Age in seconds.

allow_credentials: bool

Whether to set Access-Control-Allow-Credentials: true. Ignored when origins is empty (forced to false).

Trait Implementations

impl Clone for CorsConfig

fn clone(&self) -> CorsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CorsConfig

where CorsConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.