Struct RemoteUserMiddleware 

pub struct RemoteUserMiddleware<A>
where
    A: AuthenticationBackend,
{ /* private fields */ }

Available on crate feature sessions and crate feature middleware and native only.

Remote user authentication middleware.

Authenticates users based on the REMOTE_USER header set by a reverse proxy (Apache, Nginx, etc.). This is the Rust equivalent of Django’s RemoteUserMiddleware.

When the configured header is present, the middleware uses the provided AuthenticationBackend to look up the user. When the header is absent, the request proceeds as anonymous, clearing any previously authenticated state.

Security Warning

This middleware should only be used behind a trusted reverse proxy that controls the REMOTE_USER header. If the proxy does not strip or override this header from client requests, an attacker can impersonate any user by sending a crafted header.

Examples

use std::sync::Arc;
use reinhardt_middleware::RemoteUserMiddleware;
use reinhardt_http::MiddlewareChain;

let auth_backend = Arc::new(MyAuthBackend);
let middleware = RemoteUserMiddleware::new(auth_backend);

let app = MiddlewareChain::new(handler)
    .with_middleware(Arc::new(middleware));

Implementations

impl<A> RemoteUserMiddleware<A>

where A: AuthenticationBackend,

pub fn new(auth_backend: Arc<A>) -> RemoteUserMiddleware<A>

Available on crate features standard or middleware only.

Creates a new remote user middleware with the default REMOTE_USER header.

When the header is absent, the request proceeds as anonymous.

Arguments

• auth_backend - Authentication backend for user lookup

pub fn with_header(self, header_name: &str) -> RemoteUserMiddleware<A>

Available on crate features standard or middleware only.

Sets a custom header name for remote user identification.

Arguments

• header_name - The HTTP header name containing the remote username

Examples

let backend = Arc::new(MyAuth);
let middleware = RemoteUserMiddleware::new(backend)
    .with_header("X-Forwarded-User");

Trait Implementations

impl<A> Middleware for RemoteUserMiddleware<A>

where A: AuthenticationBackend + 'static,

fn process<'life0, 'async_trait>( &'life0 self, request: Request, next: Arc<dyn Handler>, ) -> Pin<Box<dyn Future<Output = Result<Response, Error>> + Send + 'async_trait>>

where 'life0: 'async_trait, RemoteUserMiddleware<A>: 'async_trait,

Processes a request through this middleware.

fn should_continue(&self, _request: &Request) -> bool

Determines whether this middleware should be executed for the given request.