Struct OriginAllowlist 

pub struct OriginAllowlist { /* private fields */ }

A per-connecting-origin outbound allowlist for the bridge.

Maps each connecting tab origin (the Origin presented at the WebSocket upgrade) to the set of outbound origins a request routed to that tab may reach. This is the mechanism behind per-origin scoping: a Grafana tab and a Facebook tab each carry only their own grant, so neither can borrow the other’s outbound scope.

Built from repeatable --allow-origin values, each either a bare ORIGIN (shorthand: the tab may reach its own origin) or an explicit CONNECT=OUTBOUND mapping; repeats accumulate outbound origins under the same connecting key. An empty allowlist is the unconfigured default — the WS gate admits any origin (the session token is the gate) and outbound scope is default-closed (relative URLs only).

Implementations

impl OriginAllowlist

pub fn parse<S: AsRef<str>>(values: &[S]) -> Result<Self, String>

Parses repeatable --allow-origin CLI values into an allowlist.

Each value is ORIGIN (shorthand for ORIGIN=ORIGIN) or CONNECT=OUTBOUND. Both sides must be valid, non-opaque origins; a malformed or empty side is a hard error naming the offending value.

pub fn is_empty(&self) -> bool

Whether no --allow-origin was configured (the default-open WS gate, default-closed outbound case).

pub fn permits_connection(&self, origin: Option<&str>) -> bool

Whether a WebSocket upgrade from origin is permitted.

An empty allowlist admits any origin (the token in the subprotocol is the gate). Otherwise the connecting origin must be a configured key — an origin-less upgrade is rejected once any entry exists.

pub fn outbound_for(&self, origin: Option<&str>) -> Vec<&str>

The outbound origins granted to a request routed to a tab on origin.

Empty when the tab’s origin is unknown or carries no grant — leaving only relative URLs permitted (see validate_outbound_url).

pub fn describe(&self) -> Vec<String>

Renders the configured entries as CONNECT → OUTBOUND[, OUTBOUND…] lines (connecting-origin sorted) for the startup banner. Empty when unconfigured.

Trait Implementations

impl Clone for OriginAllowlist

fn clone(&self) -> OriginAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OriginAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OriginAllowlist

fn default() -> OriginAllowlist

Returns the “default value” for a type.

impl Eq for OriginAllowlist

impl PartialEq for OriginAllowlist

fn eq(&self, other: &OriginAllowlist) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for OriginAllowlist