Std.Http.Server.Guard

21 public declarations

• allowing&Std.Http.Server.Guard.Sharing -> &Array[Str] -> Std.Http.Server.Guard.Sharing

  The same, permitting different methods.

  fn
• audited&Std.App.Audit.AuditLog -> Str -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  Audit logging middleware recording security outcomes in the tamper-evident audit ledger.

  fn
• boundedConcurrencyInt -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  Bounded concurrent request admission middleware enforcing backpressure.

  fn
• circuitBreakerInt -> Int -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  Circuit breaker middleware protecting downstream dependencies from cascading failure.

  fn
• identifiedfn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  A request identity, carried into the answer.

  fn
• identityOf&Std.Http.Server.Route.Request -> Str

  The identity a request carries, or one made for it.

  fn
• protectedHeadersfn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  The protective headers, added to whatever the answer was.

  fn
• quietfn(Str) -> () -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  A step that answers a refusal the same way whatever caused it.

  fn
• rateLimitedInt -> Int -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  A rate limiting middleware that restricts requests per peer within a moving window.

  fn
• redirectInt -> Str -> &Array[Str] -> Std.Http.Response

  A redirect to somewhere the program named, or a refusal.

  fn
• sameSiteOnlyfn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  A refusal of state-changing requests that came from another site.

  fn
• shared&Std.Http.Server.Guard.Sharing -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  The cross-origin permission, from the allowlist and only from it.

  fn
• shareNothingStd.Http.Server.Guard.Sharing

  A service that permits no other origin to read its answers.

  fn
• shareWith&Array[Str] -> Std.Http.Server.Guard.Sharing

  A service that permits the named origins, and nothing else.

  fn
• Sharing

  Which origins a service permits to read its answers.

  type
• standard&Std.Http.Server.Guard.Sharing -> Array[fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response]

  Every protection, in the order they belong.

  fn
• strictArray[fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response]

  Every protection for a service nothing shares with, which is most of them.

  fn
• timeoutInt -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  Request deadline middleware enforcing an execution time budget.

  fn
• tracedBool -> fn(Std.Http.Server.Route.Request, fn(Std.Http.Server.Route.Request) -> Std.Http.Response) -> Std.Http.Response

  A step that answers with the trace the request belongs to.

  fn
• traceOf&Std.Http.Server.Route.Request -> Bool -> Std.App.Trace.Trace

  The trace a request belongs to, continued from what it carried.

  fn
• withCredentials&Std.Http.Server.Guard.Sharing -> Std.Http.Server.Guard.Sharing

  The same, for a caller that also sends credentials. A wildcard is not

  fn