Module origin
Expand description
Which browser origins may open a session (design §6.3, “Origin”).
Origin is a browser protection: a page on another site must not be
able to ride a user’s ambient credentials into a session. A request
without Origin is not from a browser page and is not subject to it —
native clients authenticate explicitly.
Enums§
- Origin
Policy - Which
Origins are accepted.