Struct Guard 

pub struct Guard { /* private fields */ }

Everything the checks need, built once at startup.

Implementations

impl Guard

pub fn for_session( settings: &HttpConfig, identity: &SelfIdentity, peers: HashMap<IpAddr, String>, ) -> Self

Everything the checks need, from the settings and what status said.

The settings are one argument rather than three so that the token, the hosts and the origins travel as what they are — one operator’s answer about one transport — rather than as three lists a caller could pass in the wrong order.

pub fn new( token: Option<Secret>, extra_hosts: &[String], origins: &[String], identity: &SelfIdentity, peers: HashMap<IpAddr, String>, ) -> Self

Build the checks from what the operator asked for and what status said.

The allow-list always contains loopback and localhost and this node’s own names; an operator adding to it is adding, never replacing, because a list that could be narrowed to nothing is one an operator can lock themselves out with.

pub fn hosts(&self) -> Vec<&str>

The hosts this server answers for, so that rmcp’s own transport can be given the same list and the two cannot disagree.

pub fn admit( &self, headers: &HeaderMap, address: IpAddr, now: Instant, ) -> Result<(), Refusal>

Ask every question, in order, and answer the first that says no.

The order matters: a request from the wrong host is refused before its token is looked at, so a page probing for a valid token learns nothing from the timing of the refusal.

pub fn caller(&self, address: IpAddr) -> Caller

Who a request is from, as far as this server can tell.

Trait Implementations

impl Clone for Guard

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Guard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.