Struct HttpServerConfig 

#[non_exhaustive]
pub struct HttpServerConfig {
    pub allowed_origins: Vec<String>,
}

HTTP server configuration.

Production warning

HttpServerConfig::default() returns a configuration suitable for local development only — it allows a single hard-coded origin (http://localhost:3000). Production deployments must construct an explicit HttpServerConfig with the actual list of allowed origins, or pass vec![] to deny all cross-origin requests.

Use create_pjs_router_with_config to apply a non-default configuration.

Adding fields

This struct is marked #[non_exhaustive] so future additive fields (e.g. allow_credentials, max_age) do not become breaking changes. External callers cannot use the struct-init pattern; construct an instance via HttpServerConfig::new or HttpServerConfig::default and mutate the public fields you need.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

allowed_origins: Vec<String>

List of origins allowed by the CORS layer.

Matching semantics

Origins are matched against the request’s Origin header by case-sensitive byte equality. This is tower_http::cors::AllowOrigin::list behavior; it is not the case-insensitive scheme/host comparison defined by RFC 6454 §6.

In practice this matches all real browser traffic, because mainstream browsers always send lowercase scheme and host. Write your origins in lowercase.

Special values

• [] (empty) — deny all cross-origin requests (fail-closed)
• ["*"] — allow any origin (passes through to tower_http::cors::Any)
• Mixing "*" with explicit origins is rejected at construction time

Implementations

impl HttpServerConfig

pub fn new(allowed_origins: Vec<String>) -> Self

Construct a configuration with an explicit list of allowed CORS origins.

Pass vec![] to deny all cross-origin requests, or vec!["*".into()] to allow any origin. Mixing "*" with explicit origins is rejected later when the CORS layer is built.

Examples

use pjson_rs::infrastructure::http::HttpServerConfig;

let config = HttpServerConfig::new(vec!["https://app.example.com".into()]);
assert_eq!(config.allowed_origins.len(), 1);

Trait Implementations

impl Clone for HttpServerConfig

fn clone(&self) -> HttpServerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HttpServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HttpServerConfig

fn default() -> Self

Local-development default: allows http://localhost:3000.

Do not use this in production. See the type-level docs.