From 85722f1a538aa27997186ef6ce7b5e6c8210b22d Mon Sep 17 00:00:00 2001 From: Rafael Bradley Date: Mon, 14 Sep 2026 01:02:05 -0300 Subject: [PATCH] Remove X-Duckity-CSRF documentation --- content/guides/write-your-own-sdk.mdx | 5 ----- 1 file changed, 5 deletions(-) diff --git a/content/guides/write-your-own-sdk.mdx b/content/guides/write-your-own-sdk.mdx index 8b26e95..e75127a 100644 --- a/content/guides/write-your-own-sdk.mdx +++ b/content/guides/write-your-own-sdk.mdx @@ -44,12 +44,8 @@ to get challenges look like follows: POST /d1/challenges/{protection_profile_id}/issue HTTP/1.1 Host: api.duckity.com Accept: application/json -X-Duckity-CSRF: 1 ``` -The `X-Duckity-CSRF` header is required to enforce CORS preflight in web browsers and prevent CSRF. -Requests will be rejected with a `400 Bad Request` error if it's not set. Any value is valid for it. - The response will look like this: ```http @@ -57,7 +53,6 @@ HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: https://example.com Access-Control-Allow-Methods: POST -Access-Control-Allow-Headers: X-Duckity-CSRF X-RateLimit-Next-In: 1000 X-RateLimit-Resets-In: 1000 X-RateLimit-Remaining: 0