The origin allowlist — which UI origins may run the handoff.
Changed onEXACT origins. No wildcards, no subdomain matching.
It names UI ORIGINS, not instances, deliberately: what is trusted is precisely the code served at that origin, and that is what an admin must be able to point at when auditing why cross-origin access exists.
Request
- Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
- URL: /api/v1/instance/workspace-origins
- Auth: HTTP bearer
Response
The allowlist.
Changes
- info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status - info
added the optional property
/to the response with the status
- info
- warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
payload_too_largeenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status - warning
added the new
unprocessableenum value to the/response property for the response status
- warning