Struct CorsPolicy 

pub struct CorsPolicy {
    pub allowed_origins: Vec<String>,
    pub allowed_methods: Vec<String>,
    pub allowed_headers: Vec<String>,
    pub allow_credentials: bool,
    pub max_age: Duration,
}

Cross-origin resource sharing policy.

The default is deny-by-default: no origins, methods, headers, or credentials are allowed unless explicitly configured.

Fields

allowed_origins: Vec<String>

Allowed Origin header values.

allowed_methods: Vec<String>

Allowed HTTP methods.

allowed_headers: Vec<String>

Allowed request headers.

allow_credentials: bool

Whether to allow credentials.

max_age: Duration

Cache duration for pre-flight responses.

Implementations

impl CorsPolicy

pub fn validate(&self) -> Result<(), AppError>

Validate the CORS policy.

Errors

Returns an error when an origin, method, or header is invalid.

pub fn layer(&self) -> Result<CorsLayer, AppError>

Build a Tower CORS layer from this policy.

Errors

Returns an error when an origin, method, or header is invalid.

Trait Implementations

impl Clone for CorsPolicy

fn clone(&self) -> CorsPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for CorsPolicy

fn default() -> CorsPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CorsPolicy

where CorsPolicy: Default,

fn deserialize<__D>( __deserializer: __D, ) -> Result<CorsPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.