duckity/documentation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove X-Duckity-CSRF documentation

Browse Source
This commit is contained in:
nyeki
2026-09-14 01:02:05 -03:00
parent cf8f57cc45
commit 85722f1a53
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/guides/write-your-own-sdk.mdx
-5
View File
@@ -44,12 +44,8 @@ to get challenges look like follows:
POST /d1/challenges/{protection_profile_id}/issue HTTP/1.1 POST /d1/challenges/{protection_profile_id}/issue HTTP/1.1
Host: api.duckity.com Host: api.duckity.com
Accept: application/json Accept: application/json
X-Duckity-CSRF: 1
``` ```
The `X-Duckity-CSRF` header is required to enforce CORS preflight in web browsers and prevent CSRF.
Requests will be rejected with a `400 Bad Request` error if it's not set. Any value is valid for it.
The response will look like this: The response will look like this:
```http ```http
@@ -57,7 +53,6 @@ HTTP/1.1 200 OK
Content-Type: application/json Content-Type: application/json
Access-Control-Allow-Origin: https://example.com Access-Control-Allow-Origin: https://example.com
Access-Control-Allow-Methods: POST Access-Control-Allow-Methods: POST
Access-Control-Allow-Headers: X-Duckity-CSRF
X-RateLimit-Next-In: 1000 X-RateLimit-Next-In: 1000
X-RateLimit-Resets-In: 1000 X-RateLimit-Resets-In: 1000
X-RateLimit-Remaining: 0 X-RateLimit-Remaining: 0