Origin
Indicates the origin (scheme + host + port) of the request. Used for CORS and CSRF checks.
RequestSyntax
Origin: <scheme>://<host>[:<port>]Example values
| Value | Explanation |
|---|---|
| https://app.example.com | Same-origin request |
| https://other-site.com | Cross-origin |
cURL usage
curl -H "Origin: https://app.example.com" https://api.example.com/data
Common mistakes
Not sent for same-origin or GET in some browsers; required for CORS preflight.