User Agent Protection

User-agent validation works in the same way as IP address validation and is another security mechanism that can be used to prevent spam and abuse.

When using the JavaScript Client SDK, the user agent is always populated for you by the SDK.
To use the optional security measure, simply provide the user agent of the client during validation.
The user agent will be compared with what the JavaScript Client SDK detected during the start of the auth request.

When using the backend API to start an auth request, you must provide the user agent value to use this optional security feature,
Then, during validation, pass the user agent of the client. The user agent will be compared with what was sent at the start of the auth request.