Struct Cors 

pub struct Cors { /* private fields */ }

Cross-origin resource sharing.

Cors::new allows nothing; add origins/methods/headers or start from Cors::permissive. With allow_credentials(true), “any” is answered by mirroring the request (browsers reject a literal * together with credentials).

Implementations

impl Cors

pub fn new() -> Self

A policy that allows no cross-origin access until configured.

pub fn permissive() -> Self

Any origin, method and header; no credentials.

pub fn allow_origin(self, origin: &str) -> Self

Allow one origin (e.g. https://app.example.com). Invalid values are ignored with a warning.

pub fn allow_any_origin(self) -> Self

Allow every origin.

pub fn allow_method(self, method: Method) -> Self

Allow one method.

pub fn allow_any_method(self) -> Self

Allow every method.

pub fn allow_header(self, name: &str) -> Self

Allow one request header. Invalid names are ignored with a warning.

pub fn allow_any_header(self) -> Self

Allow every request header.

pub fn expose_header(self, name: &str) -> Self

Expose a response header to browser scripts.

pub fn allow_credentials(self, allow: bool) -> Self

Allow credentials (cookies, authorization headers).

pub fn max_age(self, max_age: Duration) -> Self

How long browsers may cache preflight results.

Trait Implementations

impl Clone for Cors

fn clone(&self) -> Cors

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Cors

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Cors

fn default() -> Cors

Returns the “default value” for a type.

impl Layer<BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>> for Cors

type Service = BoxCloneSyncService<Request<Body>, Response<Body>, Infallible>

The wrapped service

fn layer(&self, inner: BoxService) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.