Improve CORS Middleware: Correct Preflight Handling & Precomputed Headers (#137)

* cors middleware improvements
* cors logic and performance improvements
* granular CORS setup
* added explicit default policy setter
* added grouped cors
* added gate for cors
* small polishing and bugfix

Author: RomanEmreis

examples/tracing_example/Cargo.toml

@@ -8,7 +8,7 @@ publish = false
 tokio = "1.46.1"
 tracing = "0.1.41"
 tracing-subscriber = { version = "0.3.19", features = ["env-filter"] }
-volga = { path = "../../volga", features = ["tracing"] }
+volga = { path = "../../volga", features = ["tracing", "middleware"] }
 
 [lints]
 workspace = true

volga/Cargo.toml

@@ -32,9 +32,9 @@ serde_urlencoded = "0.7.1"
 smallvec = "1.15.1"
 
 # optional
-async-compression = { version = "0.4.36", features = ["tokio"], optional = true }
+async-compression = { version = "0.4.37", features = ["tokio"], optional = true }
 base64 = { version = "0.22.1", optional = true }
-chrono = { version = "0.4.42", optional = true }
+chrono = { version = "0.4.43", optional = true }
 cookie = { version = "0.18.1", features = ["percent-encode"], optional = true }
 jsonwebtoken = { version = "10.2.0", features = ["rust_crypto"], optional = true }
 handlebars = { version = "6.4.0", optional = true }

volga/src/app.rs

@@ -39,7 +39,7 @@ use {
 use crate::tracing::TracingConfig;
 
 #[cfg(feature = "middleware")]
-use crate::http::CorsConfig;
+use crate::http::cors::CorsRegistry;
 
 #[cfg(feature = "jwt-auth")]
 use crate::auth::bearer::{BearerAuthConfig, BearerTokenService};
@@ -107,7 +107,7 @@ pub struct App {
 
     /// CORS configuration options
     #[cfg(feature = "middleware")]
-    pub(super) cors_config: Option<CorsConfig>,
+    pub(super) cors: CorsRegistry,
 
     /// Web Server's Hosting Environment
     #[cfg(feature = "static-files")]
@@ -132,7 +132,7 @@ pub struct App {
     /// HTTP/2 resource and backpressure limits.
     #[cfg(feature = "http2")]
     pub(super) http2_limits: Http2Limits,
-    
+
     /// TCP connection parameters
     connection: Connection,
 
@@ -261,6 +261,10 @@ pub(crate) struct AppInstance {
     /// Default `Cache-Control` header value
     pub(super) cache_control: Option<HeaderValue>,
 
+    /// CORS registry
+    #[cfg(feature = "middleware")]
+    pub(super) cors: CorsRegistry,
+
     /// Request/Middleware pipeline
     pipeline: Pipeline,
 }
@@ -297,6 +301,8 @@ impl TryFrom<App> for AppInstance {
             max_header_count: app.max_header_count,
             max_header_size: app.max_header_size,
             cache_control: default_cache_control,
+            #[cfg(feature = "middleware")]
+            cors: app.cors,
             #[cfg(feature = "http2")]
             http2_limits: app.http2_limits,
             #[cfg(feature = "static-files")]
@@ -360,7 +366,7 @@ impl App {
             #[cfg(feature = "tracing")]
             tracing_config: None,
             #[cfg(feature = "middleware")]
-            cors_config: None,
+            cors: Default::default(),
             #[cfg(feature = "static-files")]
             host_env: HostEnv::default(),
             #[cfg(feature = "jwt-auth")]
@@ -781,7 +787,7 @@ impl App {
 
         println!();
         println!("\x1b[1;34m╭───────────────────────────────────────────────╮");
-        println!("│          🚀 Welcome to Volga v{version:<5}           │");
+        println!("│                >> Volga v{version:<5}                │");
         println!("│     Listening on: {url:<28}│");
         println!("╰───────────────────────────────────────────────╯\x1b[0m");