Sec-Redemption-Record header

Experimental: This is an experimental technology
Check the Browser compatibility table carefully before using this in production.

The HTTP Sec-Redemption-Record Fetch Metadata Request Header is used by the Private State Token API when forwarding redemption records. The header contains a list of issuer and redemption record pairs corresponding to each redemption record.

Note that a developer wouldn't be expected to generate Sec-Redemption-Record request headers — these are created automatically by the browser when invoking private state token send-redemption-record fetch requests.

Header type	Fetch Metadata Request Header
Forbidden request header	Yes (`Sec-` prefix)
CORS-safelisted request header	No

Syntax

http

Sec-Redemption-Record: <string>

Servers should ignore this header if it contains any other value.

Directives

<string>: A string containing issuer and redemption record pairs.

Examples