http header
Sec-Redemption-Record header
Limited availability
The HTTP Sec-Redemption-Record Fetch Metadata Request Header is used by the Private State Token API when forwarding redemption records. The header contains a list of issuer and redemption record pairs corresponding to each redemption record.
Note that a developer wouldn’t be expected to generate Sec-Redemption-Record request headers — these are created automatically by the browser when invoking private state token send-redemption-record fetch requests.
| Header type | [Fetch Metadata Request Header](https://developer.mozilla.org/en-US/docs/Glossary/Fetch%20Metadata%20Request%20Header) |
|---|---|
| [Forbidden request header](https://developer.mozilla.org/en-US/docs/Glossary/Forbidden%20request%20header) | Yes (Sec- prefix) |
| [CORS-safelisted request header](https://developer.mozilla.org/en-US/docs/Glossary/CORS-safelisted%20request%20header) | No |
Syntax
Sec-Redemption-Record: <string>
Servers should ignore this header if it contains any other value.
Directives
<string>- : A string containing issuer and redemption record pairs.
Examples
Sec-Redemption-Record: "https://redeemer.example";redemption-record="eyJwdWJsaWNfbWV0YWR...
Specifications
SpecificationsStandards references are available on the canonical MDN page.
Browser compatibility
Browser compatibilityCompatibility data is available on the canonical MDN page.