Use a Browser API Token With an Integration

Fetch API

const key = 'dacaffe7ce69dfd1071531e925f667905a1c981fb40d06c676880e84352cb3aa';
fetch('https://example.com/@api/deki/pages/home/info', {
    headers: {
        'X-Deki-Token': key
    }
}).then((response) => {
    
    // ...
});

jQuery

const key = 'dacaffe7ce69dfd1071531e925f667905a1c981fb40d06c676880e84352cb3aa';
$.ajax({
    url: 'https://example.com/@api/deki/pages/home/info',
    method: 'GET',
    headers: {
        'X-Deki-Token': key
    }
}).done((data) => {

    // ...
});

Upon receipt, Expert checks the Origin HTTP Header sent by the browser against the hostname patterns allowed when the Browser API Token was generated. If there is a match, the cross origin API request is allowed. If the origin hostname does not match any of the Browser API Token's allowed hostname patterns, the API request is denied and an error message is returned.