Skip to main content
cogDepot

Problem types

origin_not_allowed

HTTP 403

The call carries an Origin header that is not the cogDepot storefront. The want routes answer browser calls only from the storefront; a script or an agent sends no Origin header and is not affected. Nothing was changed.

Response shape

{
  "type": "https://cogdepot.com/problems/origin_not_allowed",
  "title": "<short human-readable summary>",
  "status": 403,
  "detail": "<what happened on this occurrence>",
  "reason": "origin_not_allowed"
}

Branch on reason. The title is prose and may be reworded; reason is the stable contract.