Struct AllowList 

pub struct AllowList<'a> { /* private fields */ }

Allows only the listed Rules, over https on the default port.

Before matching, every URL must pass these rules (each refusal is a PolicyError::Endpoint):

• scheme https (plain http to a loopback host only when built with with_loopback_http, feature testing), default port, no user-info, no fragment;
• every path segment non-empty (no //, no trailing /), not . or .. in any spelling, and free of encoded /, \, NUL or control bytes, and of characters outside RFC 3986 pchar.

The query string is not constrained. Redirects are never followed by the client, so a listed endpoint cannot hand the request on.

Implementations

impl<'a> AllowList<'a>

pub fn new(rules: &'a [Rule<'a>]) -> Result<Self>

An allow list of rules; refuses a malformed host or template.

pub fn with_loopback_http(self) -> Self

Also accept plain http to a loopback host (127.0.0.1, [::1], localhost, any port), which then stands in for every listed host: emulators and stub servers in tests.

pub fn rules(&self) -> &'a [Rule<'a>]

The rules.

Trait Implementations

impl<'a> Clone for AllowList<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for AllowList<'a>

impl<'a> Debug for AllowList<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl RequestPolicy for AllowList<'_>

fn check(&self, method: Method, url: &Url) -> Result<(), PolicyError>

Allow or refuse method url. Called once per request, before the token is fetched or a connection opened.

fn check_query(&self, sql: &str) -> Result<(), PolicyError>

Allow or refuse the SQL text of a BigQuery query job. The default refuses every query: this crate has no SQL parser, so a policy that permits queries must say which.