Struct AppState 

pub struct AppState { /* private fields */ }

Shared application state injected into every route handler via axum::extract::State.

Implementations

impl AppState

pub fn new(commerce: Commerce) -> Self

Create a new AppState wrapping a Commerce instance.

pub fn new_with_tenant_db_dir( commerce: Commerce, tenant_db_dir: Option<PathBuf>, ) -> Self

Create a new AppState with optional per-tenant database directory.

pub fn with_tenant_db_dir(self, tenant_db_dir: impl Into<PathBuf>) -> Self

Enable per-tenant SQLite routing under a base directory.

pub const fn with_ignore_tenant_header(self) -> Self

Ignore x-tenant-id headers when per-tenant routing is disabled.

By default, a request that carries x-tenant-id while no tenant database directory is configured is rejected with a 400 so that callers are never silently served shared data. Deployments that intentionally sit behind a multi-tenant proxy (which forwards the header but handles isolation upstream) can opt back into the old silent fallthrough behavior with this escape hatch.

pub const fn ignores_tenant_header(&self) -> bool

Whether x-tenant-id headers are ignored when tenant routing is disabled.

pub fn with_max_tenant_dbs(self, max_tenant_dbs: usize) -> Self

Set the maximum number of per-tenant databases kept in the active cache.

When capacity is reached, the least-recently-used idle tenant engine is evicted to make room for a new tenant. If every cached tenant engine is currently in use, creation of an additional tenant database is rejected.

pub fn with_metrics_bearer_auth(self, token: impl Into<String>) -> Self

Configure bearer authentication for the /metrics endpoint.

pub fn without_metrics_auth(self) -> Self

Disable authentication for /metrics.

pub fn with_metrics_ip_allowlist<I>(self, ips: I) -> Self

where I: IntoIterator<Item = IpAddr>,

Configure a client IP allowlist for /metrics.

Empty lists disable allowlist enforcement.

pub fn without_metrics_ip_allowlist(self) -> Self

Disable IP allowlist checks for /metrics.

pub fn with_metrics_ip_cidr_allowlist<I>(self, cidrs: I) -> Self

where I: IntoIterator<Item = IpCidr>,

Configure a CIDR-based client IP allowlist for /metrics.

Empty lists disable CIDR allowlist enforcement.

pub fn without_metrics_ip_cidr_allowlist(self) -> Self

Disable CIDR-based IP allowlist checks for /metrics.

pub fn with_metrics_trusted_proxies<I>(self, cidrs: I) -> Self

where I: IntoIterator<Item = IpCidr>,

Configure trusted proxy CIDRs for /metrics.

When configured, forwarded headers are only trusted when the request peer IP matches one of these networks.

pub fn without_metrics_trusted_proxies(self) -> Self

Disable trusted proxy checks for /metrics.

pub const fn with_metrics_header_limits( self, limits: MetricsHeaderLimits, ) -> Self

Configure max accepted forwarding header lengths for /metrics.

pub fn tenant_db_dir(&self) -> Option<&Path>

Returns the configured tenant DB directory when per-tenant routing is enabled.

pub fn commerce(&self) -> &Commerce

Access the underlying default Commerce engine.

pub fn metrics_bearer_auth_token(&self) -> Option<&str>

Return the configured bearer token for /metrics, if set.

pub fn metrics_ip_allowlist(&self) -> Option<Vec<IpAddr>>

Return configured metrics IP allowlist entries.

pub fn metrics_ip_cidr_allowlist(&self) -> Option<Vec<IpCidr>>

Return configured CIDR-based metrics IP allowlist entries.

pub fn metrics_ip_allowlist_len(&self) -> usize

Return number of configured exact-IP metrics allowlist entries.

pub fn metrics_ip_cidr_allowlist_len(&self) -> usize

Return number of configured CIDR metrics allowlist entries.

pub const fn has_metrics_ip_allowlist(&self) -> bool

Returns whether /metrics IP allowlist checks are enabled.

pub fn metrics_trusted_proxies(&self) -> Option<Vec<IpCidr>>

Returns configured trusted proxy CIDRs.

pub fn metrics_trusted_proxies_len(&self) -> usize

Return number of configured trusted proxy CIDR entries.

pub const fn metrics_header_limits(&self) -> MetricsHeaderLimits

Returns max accepted forwarding header lengths for /metrics.

pub const fn has_metrics_trusted_proxies(&self) -> bool

Returns whether trusted proxy CIDRs are configured.

pub fn is_metrics_trusted_proxy(&self, ip: IpAddr) -> bool

Check whether a peer IP is within configured trusted proxy CIDRs.

pub fn is_metrics_ip_allowed(&self, ip: IpAddr) -> bool

Check whether a metrics client IP is allowed by the configured allowlist.

pub fn tenant_cache_metrics(&self) -> TenantCacheMetrics

Snapshot tenant cache runtime metrics.

pub fn commerce_for_tenant( &self, tenant_id: Option<&str>, ) -> Result<Arc<Commerce>, HttpError>

Resolve the Commerce engine for a tenant.

When per-tenant routing is disabled, requests without a tenant id get the default engine. Requests that do carry a tenant id are rejected (the backend cannot isolate them), unless Self::with_ignore_tenant_header was configured.

Trait Implementations

impl Clone for AppState

fn clone(&self) -> AppState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AppState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.