Struct CorsPolicy 

pub struct CorsPolicy { /* private fields */ }

CORS policy aggregate root. Immutable after construction.

Implementations

impl CorsPolicy

pub fn new() -> Self

Maximally permissive default: wildcard origins, no credentials, default expose headers, 3600 s preflight cache.

pub fn from_env() -> Self

Load from env. Missing variables fall back to defaults; present but unparseable values also fall back (ignored).

• CORS_ALLOWED_ORIGINS — comma-separated list, or *.
• CORS_ALLOW_CREDENTIALS — true/1/yes/on enables.
• CORS_MAX_AGE — decimal seconds.

pub fn with_allowed_origins(self, origins: AllowedOrigins) -> Self

Replace the origin strategy.

pub fn with_allow_credentials(self, allow: bool) -> Self

Enable (or disable) credentialed requests.

pub fn with_expose_headers(self, headers: Vec<String>) -> Self

Override the exposed-headers list.

pub fn with_max_age(self, duration: Duration) -> Self

Override the preflight cache duration.

pub fn max_age(&self) -> Duration

Current preflight cache duration.

pub fn preflight_headers( &self, origin: Option<&str>, req_method: &str, req_headers: &str, ) -> Option<Vec<(&'static str, String)>>

Build the header set for a preflight (OPTIONS) response.

Returns None when the request origin is not permitted; the caller MUST emit a no-CORS response (typically plain 403 or an un-augmented 200).

req_method is the value of Access-Control-Request-Method. req_headers is the verbatim Access-Control-Request-Headers value (comma-separated); passing an empty string is valid and yields an empty Access-Control-Allow-Headers.

pub fn response_headers( &self, origin: Option<&str>, ) -> Vec<(&'static str, String)>

Build the header set for a normal (non-preflight) response.

Always emits Access-Control-Expose-Headers plus — when the origin is permitted — Access-Control-Allow-Origin and Vary: Origin.

Trait Implementations

impl Clone for CorsPolicy

fn clone(&self) -> CorsPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsPolicy

fn default() -> Self

Returns the “default value” for a type.