Struct CorsConfig 

pub struct CorsConfig {
    pub allowed_origins: Vec<String>,
}

Cross-origin policy snapshot loaded from the process environment.

allowed_origins is the explicit allowlist of cross-origin browser callers that may reach the API. The default is empty — i.e. cross-origin requests are rejected until the operator widens the allowlist. This matches the gateway’s other security defaults (TENSOR_WASM_API_TOKENS dev mode is the only opt-out).

To widen, list one origin per entry exactly as the browser sends the Origin header (scheme + host + optional port), comma-separated:

TENSOR_WASM_API_CORS_ALLOWED_ORIGINS=https://app.example.com,https://admin.example.com

Fields

allowed_origins: Vec<String>

Origins permitted for cross-origin requests. Empty = reject all.

Implementations

impl CorsConfig

pub fn from_env() -> Self

Load the allowlist from $TENSOR_WASM_API_CORS_ALLOWED_ORIGINS. Unset or empty = reject all cross-origin requests.

pub fn from_origins<I, S>(iter: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Construct directly from an explicit list of origins. The empty list yields the safe default (no cross-origin requests admitted).

Trait Implementations

impl Clone for CorsConfig

fn clone(&self) -> CorsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsConfig

fn default() -> CorsConfig

Returns the “default value” for a type.