Struct SecurityConfig 

pub struct SecurityConfig {
    pub auth: AuthConfig,
    pub rate_limit: RateLimitConfig,
    pub api_keys: Vec<String>,
    pub capabilities: Option<CapabilitySet>,
    pub cors: CorsConfig,
    pub allowed_hosts: Option<Vec<String>>,
}

Security configuration for the server.

Fields

auth: AuthConfig

Authentication configuration.

rate_limit: RateLimitConfig

Rate limiting configuration.

api_keys: Vec<String>

API keys to pre-register.

capabilities: Option<CapabilitySet>

Capabilities granted to the pre-registered keys and to the auto-generated fallback key.

None (the default) means full-control (wildcard) — the backward- compatible behavior for a bare --api-key / --require-auth (spec §4). Some(set) issues fine-grained tokens scoped to that set (spec §9).

cors: CorsConfig

CORS configuration.

allowed_hosts: Option<Vec<String>>

Host names this server answers to, when it is worth checking.

None disables the check. It is meant for a loopback-bound server, where DNS rebinding is the one attack CORS cannot stop: the attacker’s name is rebound to 127.0.0.1, so the browser considers the request same-origin and sends it. The Host header still carries the attacker’s name, which is what this compares. A published server is deliberately reachable under a name we may not know, so the check does not apply there.

Implementations

impl SecurityConfig

pub fn secure() -> Self

Create a secure configuration.

pub fn development() -> Self

Create a development configuration (no auth, relaxed limits).

pub fn with_api_key(self, key: impl Into<String>) -> Self

Add an API key.

pub fn with_capabilities(self, capabilities: CapabilitySet) -> Self

Scope the issued tokens to a fine-grained capability set (spec §9).

Applies to the pre-registered keys and to the auto-generated fallback key. Without this, tokens are full-control (legacy-compatible).

pub fn with_allowed_hosts(self, hosts: Vec<String>) -> Self

Answer only to these host names.

pub fn with_cors_allow_any(self) -> Self

Enable permissive (Any) CORS. Opt-in; only for trusted browser UIs.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.