Struct SecurityPolicy 

pub struct SecurityPolicy {
    pub require_tls: bool,
    pub ssrf_protection: bool,
}

Security posture applied to outbound A2aClient requests.

Named fields eliminate the transposition hazard of a two-bool builder method (with_security(true, false) vs. with_security(false, true) are easy to swap by accident) and group the security boundary as one reviewable unit.

Examples

use zeph_a2a::{A2aClient, SecurityPolicy};

// Recommended for production: reject HTTP and private/loopback targets. Pass the
// policy directly to `new` so it can never be silently inherited by omission.
let client = A2aClient::new(reqwest::Client::new(), SecurityPolicy::hardened());

// Partial policy via named fields — no ambiguity about which flag is which.
let tls_only = SecurityPolicy {
    require_tls: true,
    ssrf_protection: false,
};
let _ = client.with_security(tls_only);

Fields

require_tls: bool

Reject any endpoint that does not start with https://, and build requests with https_only(true) so a redirect cannot silently downgrade the connection to http://.

ssrf_protection: bool

Resolve the endpoint hostname via DNS, reject private/loopback/link-local ranges, and pin the validated address for the actual connection so it cannot be re-resolved to a different (attacker-controlled) address between the check and the connect.

Implementations

impl SecurityPolicy

pub const fn hardened() -> Self

Both protections enabled. The recommended posture for production deployments that talk to untrusted or third-party A2A endpoints.

Examples

use zeph_a2a::SecurityPolicy;

let policy = SecurityPolicy::hardened();
assert!(policy.require_tls);
assert!(policy.ssrf_protection);

pub const fn permissive() -> Self

Both protections disabled. Suitable only for local development against trusted, non-adversarial endpoints (e.g. http://localhost).

Examples

use zeph_a2a::SecurityPolicy;

let policy = SecurityPolicy::permissive();
assert!(!policy.require_tls);
assert!(!policy.ssrf_protection);

Trait Implementations

impl Clone for SecurityPolicy

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SecurityPolicy

impl Debug for SecurityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SecurityPolicy

impl PartialEq for SecurityPolicy

fn eq(&self, other: &SecurityPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SecurityPolicy