Struct CorsConfig 

pub struct CorsConfig {
    pub allowed_origins: Vec<String>,
    pub allow_credentials: bool,
    pub max_age_secs: u64,
}

CORS configuration (HIGH-SEC-006).

Fields

allowed_origins: Vec<String>

Allowed origins (comma-separated).

allow_credentials: bool

Allow credentials (cookies, auth headers).

max_age_secs: u64

Max age for preflight cache (seconds).

Implementations

impl CorsConfig

pub fn from_env() -> Self

Creates config from environment variables.

Reads SUBCOG_MCP_CORS_ALLOWED_ORIGINS (comma-separated list), SUBCOG_MCP_CORS_ALLOW_CREDENTIALS, and SUBCOG_MCP_CORS_MAX_AGE_SECS.

pub fn with_origins(self, origins: Vec<String>) -> Self

Sets the allowed origins.

pub const fn with_credentials(self, allow: bool) -> Self

Sets whether to allow credentials.

Trait Implementations

impl Clone for CorsConfig

fn clone(&self) -> CorsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CorsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CorsConfig

Available on crate feature http only.

fn default() -> Self

Returns the “default value” for a type.