Only the request header？

[jackadam1981]

After studying for a few days, only the client request header can be verified. How can this be used?

Do you have any examples of sessions and tokens?

[casbin-bot]

@techoner @Nekotoxin

[hsluoyz]

@jackadam1981 hi, can you provider more details?