Method query_allowed_ips

crates/openshell-supervisor-network/src/opa.rs:557–562

Query `allowed_ips` from the matched endpoint config for a given request. Returns the list of CIDR/IP strings from the endpoint's `allowed_ips` field, or an empty vec if the field is absent or the endpoint has no match. This is used by the proxy to decide between full SSRF blocking and allowlist-based IP validation.

(&self, input: &NetworkInput)

    /// match. This is used by the proxy to decide between full SSRF blocking
    /// and allowlist-based IP validation.
    pub fn query_allowed_ips(&self, input: &NetworkInput) -> Result<Vec<String>> {
        Ok(self
            .query_endpoint_config(input)?
            .map(|val| get_str_array(&val, "allowed_ips"))
            .unwrap_or_default())
    }

    /// Return true when the matched endpoint is an exact declared hostname.
    ///