Adding `pdk_cors_lib` library as a dependency

Run this command in a terminal, in your project's directory:

cargo add pdk-cors-lib

To add it manually, edit your project's Cargo.toml file and add to the [dependencies] section:

pdk-cors-lib = "1.6.0"

The pdk_cors_lib library will be automatically available globally. Read the pdk_cors_lib library documentation.

Back to the crate overview.

Readme

PDK CORS Lib

PDK CORS Lib is a library that helps validate and enforce CORS behavior for your Flex Gateway custom policies.

You may be looking for:

cors-lib in action

[dependencies]

# This package is included as a transitive dependency of the pdk crate.
pdk = { version = "1.6"}

use regex::Regex;
use pdk::cors;
use pdk::cors::{AllowedMethod, Cors, OriginGroup};
use pdk::hl::*;
use pdk::logger;

async fn request_filter(request_state: RequestState, cors: &Cors<'_>) -> Flow<Vec<(String, String)>> {
    let header_state = request_state.into_headers_state().await;

    // Determine what kind of request is incoming.
    match cors.check_headers(header_state.handler().headers().as_slice()) {
        Ok(check) => match check.response_type() {

            // A preflight request must return a 200 OK.
            cors::ResponseType::Preflight => {
                Flow::Break(Response::new(200).with_headers(check.into_headers()))
            }

            // A main request must continue.
            cors::ResponseType::Main => {
                // Forward the headers to set on the response.
                Flow::Continue(check.into_headers())
            }
        },

        // A validation problem occurred. Block the request.
        Err(message) => {
            logger::debug!("Request finished with the following error {message}");
            Flow::Break(Response::new(200))
        }
    }
}

async fn response_filter(state: ResponseHeadersState, data: RequestData<Vec<(String, String)>>) {
    // Take the Cors headers to add to the response.
    let RequestData::Continue(headers_to_add) = data else {
        return;
    };

    // Add all the Cors headers into the response.
    for (name, value) in headers_to_add.iter() {
        state.handler().set_header(name, value);
    }
}

#[entrypoint]
async fn configure(launcher: Launcher) -> anyhow::Result<()> {

    // Create the configuration for CORS.
    let cors_config = cors::Configuration::builder()
        .public_resource(false)
        .support_credentials(true)
        .origin_groups(vec![
            OriginGroup::builder()
                .origin_group_name("example-origin-name")
                .plain_origins(vec!["example.com".to_string()])
                .regex_origins(vec![Regex::new(".*\\.example\\.com")?])
                .allowed_methods(vec![
                    AllowedMethod::builder().allowed(true).method_name("GET").build()?,
                    AllowedMethod::builder().allowed(true).method_name("POST").build()?,
                ])
                .access_control_max_age(200)
                .headers(vec!["header-example".to_string()])
                .exposed_headers(vec!["exposed-header-example".to_string()])
                .build()?
        ])
        .build()?;

    let cors = Cors::new(&cors_config);

    let filter = on_request(|rs| request_filter(rs, &cors))
        .on_response(|rs, request_data| response_filter(rs, request_data));

    launcher.launch(filter).await?;
    Ok(())
}

Support

For assistance with this project, you can access support resources or submit a support case through the official support channel at https://help.mulesoft.com/s/support.

License

Copyright 2025 Salesforce, Inc. All rights reserved. 

These Terms of Use govern the download, installation, and/or use of this software provided by Salesforce, Inc. (“Salesforce”) (the “Software”), were last updated on April 15, 2022, and constitute a legally binding agreement between you and Salesforce. If you do not agree to these Terms of Use, do not install or use the Software.  << The Software may link to third-party software components licensed under various open source licenses (“Open Source Components”). These Terms of Use pertain solely to Salesforce's proprietary code in the Software. It does not alter or extend any rights or obligations regarding the Open Source Components. For clarity, your use of the Open Source Components is governed by the terms of the applicable open source license(s). You are solely responsible for complying with the terms and conditions of those open source licenses.>>
 
Salesforce grants you a worldwide, non-exclusive, no-charge, royalty-free copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute the Software and derivative works subject to these Terms. These Terms shall be included in all copies or substantial portions of the Software. 

Subject to the limited rights expressly granted hereunder, Salesforce reserves all rights, title, and interest in and to all intellectual property subsisting in the Software. No rights are granted to you hereunder other than as expressly set forth herein. Users residing in countries on the United States Office of Foreign Assets Control sanction list, or which are otherwise subject to a US export embargo, may not use the Software.
 
Implementation of the Software may require development work, for which you are responsible. The Software may contain bugs, errors and incompatibilities and is made available on an AS IS basis without support, updates, or service level commitments. 
 
Salesforce reserves the right at any time to modify, suspend, or discontinue, the Software (or any part thereof) with or without notice. You agree that Salesforce shall not be liable to you or to any third party for any modification, suspension, or discontinuance.

You agree to defend Salesforce against any claim, demand, suit or proceeding made or brought against Salesforce by a third party arising out of or accruing from (a) your use of the Software, and (b) any application you develop with the Software that infringes any copyright, trademark, trade secret, trade dress, patent, or other intellectual property right of any person or defames any person or violates their rights of publicity or privacy (each a “Claim Against Salesforce”), and will indemnify Salesforce from any damages, attorney fees, and costs finally awarded against Salesforce as a result of, or for any amounts paid by Salesforce under a settlement approved by you in writing of, a Claim Against Salesforce, provided Salesforce (x) promptly gives you written notice of the Claim Against Salesforce, (y) gives you sole control of the defense and settlement of the Claim Against Salesforce (except that you may not settle any Claim Against Salesforce unless it unconditionally releases Salesforce of all liability), and (z) gives you all reasonable assistance, at your expense.

WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, THE SOFTWARE IS NOT SUPPORTED AND IS PROVIDED “AS IS,” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. IN NO EVENT SHALL SALESFORCE HAVE ANY LIABILITY FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR DAMAGES BASED ON LOST PROFITS, DATA, OR USE, IN CONNECTION WITH THE SOFTWARE, HOWEVER CAUSED AND WHETHER IN CONTRACT, TORT, OR UNDER ANY OTHER THEORY OF LIABILITY, WHETHER OR NOT YOU HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
 
These Terms of Use shall be governed exclusively by the internal laws of the State of California, without regard to its conflicts of laws rules. Each party hereby consents to the exclusive jurisdiction of the state and federal courts located in San Francisco County, California to adjudicate any dispute arising out of or relating to these Terms of Use and the download, installation, and/or use of the Software. Except as expressly stated herein, these Terms of Use constitute the entire agreement between the parties, and supersede all prior and contemporaneous agreements, proposals, or representations, written or oral, concerning their subject matter. No modification, amendment, or waiver of any provision of these Terms of Use shall be effective unless it is by an update to these Terms of Use that Salesforce makes available, or is in writing and signed by the party against whom the modification, amendment, or waiver is to be asserted.

Data Privacy: Salesforce may collect, process, and store device, system, and other information related to your use of the Software. This information includes, but is not limited to, IP address, user metrics, and other data (“Usage Data”). Salesforce may use Usage Data for analytics, product development, and marketing purposes. You acknowledge that files generated in conjunction with the Software may contain sensitive or confidential data, and you are solely responsible for anonymizing and protecting such data.

Adding pdk_cors_lib library as a dependency

Adding `pdk_cors_lib` library as a dependency