Method allowed_methods

crates/openshell-prover/src/policy.rs:206–235

The set of HTTP methods this endpoint allows. Empty means all (L4-only).

(&self)

    /// The set of HTTP methods this endpoint allows. Empty means all (L4-only).
    pub fn allowed_methods(&self) -> HashSet<String> {
        if self.protocol.is_empty() {
            return HashSet::new(); // L4-only: all traffic passes
        }
        match self.access.as_str() {
            "read-only" => ["GET", "HEAD", "OPTIONS"]
                .iter()
                .map(|s| (*s).to_owned())
                .collect(),
            "read-write" => ["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH"]
                .iter()
                .map(|s| (*s).to_owned())
                .collect(),
            "full" => ALL_METHODS.iter().map(|s| (*s).to_owned()).collect(),
            _ => {
                if !self.rules.is_empty() {
                    let mut methods = HashSet::new();
                    for r in &self.rules {
                        let m = r.method.to_uppercase();
                        if m == "*" {
                            return ALL_METHODS.iter().map(|s| (*s).to_owned()).collect();
                        }
                        methods.insert(m);
                    }
                    return methods;
                }
                HashSet::new()
            }
        }
    }
}

/// A binary path entry in a network policy rule.