Back
Guide
Intermediate
Real Projects

CSRF, CORS and SameSite Cookies: What Each One Protects and How to Configure Them Without Mixing Them Up

Clear up the difference between origin and site, what CORS does (and does not do), how SameSite cookies work, and when to add CSRF tokens or Fetch Metadata. With FastAPI and JavaScript examples.

14 minutes read
Josue Puig
0 views
csrf
cors
seguridad
FastAPI

Was this resource helpful?

Share your comments or suggestions to improve our content.

Loading comments...

Related Resources

Guía
PREMIUM

API Errors with Problem Details (RFC 9457): One Standard Format, Stable Types, and Clients That Stop Parsing Strings

Standardize API errors with Problem Details, stable types, validation, and clients that interpret structured fields.

Guía
PREMIUM

API Versioning and Contract Testing: Safe Changes, OpenAPI in CI, Pact, and Retiring Endpoints with Sunset

Manage API changes with OpenAPI, Pact, and compatibility policies. Plan versioning, deprecation, and retirement.

Guía
PREMIUM

Architecture Decision Records (ADRs): Document the Why Behind Your Technical Decisions

Document architecture decisions with ADRs: context, alternatives, consequences, review, and CI validation.