Add note about protected handler (#182)

This commit is contained in:
Lukasz Ostrowski 2023-02-20 10:50:33 +01:00 committed by GitHub
parent 258a203c5c
commit 745cb49cbf
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -1,6 +1,11 @@
# Protected API handlers # Protected API handlers
The App SDK provides helpers which ensure, that incoming requests are send from Saleor dashboard. Example of such situation could be a change of the application configuration iframe. The App SDK provides helpers which ensure, that incoming requests are sent from Saleor dashboard.
Example of such situation could be a change of the application configuration iframe.
> **Warning**
> This handler only works for requests originated from frontend calls. It checks JWT token from the client, which is available
> in AppBridge. Do not call this endpoint from backend context (calling it from API function will fail)
## How to protect the endpoint ## How to protect the endpoint