Struct SecurityConfig 

#[non_exhaustive]
pub struct SecurityConfig {
    pub csrf_same_site: String,
    pub cors_allow_origins: Vec<String>,
    pub cors_allow_credentials: bool,
    pub csp: String,
    pub coep: String,
    pub user_agent_blocklist: Vec<String>,
    pub enable_pii_masking: bool,
    pub csrf_signed_webhook_paths: Vec<String>,
}

Configuration options for application security layers.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

csrf_same_site: String

SameSite policy for the CSRF cookie (“Lax”, “Strict”, or “None”).

cors_allow_origins: Vec<String>

List of allowed origins for Cross-Origin Resource Sharing (CORS).

cors_allow_credentials: bool

Allow browser credentials only for the exact configured CORS origins.

csp: String

Content-Security-Policy (CSP) header value.

coep: String

Cross-Origin-Embedder-Policy value. The strict default is require-corp; applications that deliberately embed reviewed credentialless cross-origin media can opt into credentialless, while unsafe-none must be an explicit application-level decision.

user_agent_blocklist: Vec<String>

Case-insensitive User-Agent substrings to block in the WAF middleware. Defaults cover selected crawlers, not general HTTP clients or health probes. This forgeable header is a traffic preference, never authentication.

enable_pii_masking: bool

Enable global automatic PII masking middleware on all textual responses (heavy performance cost).

csrf_signed_webhook_paths: Vec<String>

Exact POST paths that are exempt from browser CSRF tokens because a mandatory signed webhook middleware authenticates them. Wildcards and route parameters are rejected.

Implementations

impl SecurityConfig

pub fn validate(&self) -> Result<(), ConfigError>

Validates browser security policy and exact-path CSRF webhook exemptions.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecurityConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.