same_origin
This option is relevant for clients used within a Web Browser, such as nats.js.
When set to true, the HTTP Origin header must match the request’s
hostname. Refer to cross-origin resource sharing documentation
for more details.
The check only applies when the request carries an Origin header,
which browsers send and non-browser clients generally do not.
Types
| Type | Description | Choices |
|---|---|---|
boolean | - | true, false |