You can include various important information in the header for the server to understand.
𝐀𝐜𝐜𝐞𝐩𝐭: 𝐚𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧/𝐣𝐬𝐨𝐧 - Specifies the data type we want from the server 𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐭𝐲𝐩𝐞: 𝐚𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧/𝐣𝐬𝐨𝐧 - Specifies the data type we want to send to server 𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧 - Used to pass the token 𝐀𝐜𝐜𝐞𝐬𝐬-𝐂𝐨𝐧𝐭𝐫𝐨𝐥-𝐀𝐥𝐥𝐨𝐰-𝐎𝐫𝐢𝐠𝐢𝐧 - This header needs to be set up by the server to resolve CORS issues 𝐗-𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐓𝐲𝐩𝐞-𝐎𝐩𝐭𝐢𝐨𝐧𝐬: 𝐧𝐨𝐬𝐧𝐢𝐟𝐟 - Helps prevent cross-site scripting (XSS) attacks 𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲-𝐏𝐨𝐥𝐢𝐜𝐲 - Allows you to restrict which resources (such as JavaScript, CSS, Images, etc.) can be loaded

You can include various important information in the header for the server to understand.

𝐀𝐜𝐜𝐞𝐩𝐭: 𝐚𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧/𝐣𝐬𝐨𝐧 - Specifies the data type we want from the server  
𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐭𝐲𝐩𝐞: 𝐚𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧/𝐣𝐬𝐨𝐧 - Specifies the data type we want to send to server  
𝐀𝐮𝐭𝐡𝐨𝐫𝐢𝐳𝐚𝐭𝐢𝐨𝐧 - Used to pass the token  
𝐀𝐜𝐜𝐞𝐬𝐬-𝐂𝐨𝐧𝐭𝐫𝐨𝐥-𝐀𝐥𝐥𝐨𝐰-𝐎𝐫𝐢𝐠𝐢𝐧 - This header needs to be set up by the server to resolve CORS issues  
𝐗-𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐓𝐲𝐩𝐞-𝐎𝐩𝐭𝐢𝐨𝐧𝐬: 𝐧𝐨𝐬𝐧𝐢𝐟𝐟 - Helps prevent cross-site scripting (XSS) attacks  
𝐂𝐨𝐧𝐭𝐞𝐧𝐭-𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲-𝐏𝐨𝐥𝐢𝐜𝐲 - Allows you to restrict which resources (such as JavaScript, CSS, Images, etc.) can be loaded

Essential s𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐢𝐧 𝐀𝐏𝐈

Essential s𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐇𝐞𝐚𝐝𝐞𝐫𝐬 𝐢𝐧 𝐀𝐏𝐈 🚀

I am a Full-stack MERN engineer with a product centric approach, specializing in the design and development of scalable, reliable, production ready web application.
