User Agent Protection

User-agent validation works in the same way as IP address validation and is another security mechanism that can be used to prevent spam and abuse.

JavaScript Client SDK

• When using the JavaScript Client SDK, the user agent is always populated for you by the SDK.
• To use the optional security measure, simply provide the user agent of the client during validation.
• The user agent will be compared with what the JavaScript Client SDK detected during the start of the auth request.

Backend API

• When using the backend API to start an auth request, you must provide the user agent value to use this optional security feature,
• Then, during validation, pass the user agent of the client. The user agent will be compared with what was sent at the start of the auth request.