mirror of
https://github.com/xcat2/confluent.git
synced 2025-08-26 21:20:30 +00:00
Enable a WebUI to request an auth token. This will allow it to indicate it is running in a browser and have the server implement protections such that other software in the browser cannot send arbitrary requests into the server API. This is implemented in a backward compatible fashion, allowing, for example, purely non-browser clients to ignore the CSRF protection as it doesn't apply to that use case.