Module cors 

Available on crate feature cors only.

Middleware which adds headers for CORS.

Example

use http::{Request, Response, Method, header}; use http_body_util::Full; use bytes::Bytes; use tower::{ServiceBuilder, ServiceExt, Service}; use tower_http::cors::{Any, CorsLayer}; use std::convert::Infallible; async fn handle(request: Request<Full<Bytes>>) -> Result<Response<Full<Bytes>>, Infallible> { Ok(Response::new(Full::default())) } let cors = CorsLayer::new() // allow `GET` and `POST` when accessing the resource .allow_methods([Method::GET, Method::POST]) // allow requests from any origin .allow_origin(Any); let mut service = ServiceBuilder::new() .layer(cors) .service_fn(handle); let request = Request::builder() .header(header::ORIGIN, "https://example.com") .body(Full::default()) .unwrap(); let response = service .ready() .await? .call(request) .await?; assert_eq!( response.headers().get(header::ACCESS_CONTROL_ALLOW_ORIGIN).unwrap(), "*", );

Structs

AllowCredentials

Holds configuration for how to set the Access-Control-Allow-Credentials header.

AllowHeaders

Holds configuration for how to set the Access-Control-Allow-Headers header.

AllowMethods

Holds configuration for how to set the Access-Control-Allow-Methods header.

AllowOrigin

Holds configuration for how to set the Access-Control-Allow-Origin header.

AllowPrivateNetwork

Holds configuration for how to set the Access-Control-Allow-Private-Network header.

Any

Represents a wildcard value (*) used with some CORS headers such as CorsLayer::allow_methods.

Cors

Middleware which adds headers for CORS.

CorsLayer

Layer that applies the Cors middleware which adds headers for CORS.

ExposeHeaders

Holds configuration for how to set the Access-Control-Expose-Headers header.

MaxAge

Holds configuration for how to set the Access-Control-Max-Age header.

ResponseFuture

Response future for Cors.

Vary

Holds configuration for how to set the Vary header.

Functions

anyDeprecated

Represents a wildcard value (*) used with some CORS headers such as CorsLayer::allow_methods.

preflight_request_headers

Returns an iterator over the three request headers that may be involved in a CORS preflight request.