You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: standards/request-response.md
+9-4Lines changed: 9 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -504,15 +504,19 @@ Sps-Cors-Error: bad origin
504
504
-__prod__ - Well-known value used to represent production customer configuration and can be supported as a static mode in some legacy services without full dynamic support. Usage of dynamically named configuration sets is preferred. When no request or response header is provided for `Sps-Execution-Context` this is interpreted as the default value.
505
505
- An invalid or unsupported header value provided **MUST** result in a `400 - Bad Request` following standard [error format](errors.md#400-bad-request).
506
506
- The header value **MUST** be at minimum 1 character in length and **MUST NOT** exceed a maximum length of 100 characters.
507
-
- The header value **MUST** be case-insensitive.
508
-
- The header value **MUST** conform to: `[A-Za-z0-9_-]`.
509
-
- It **MUST** only contain ASCII letters (A–Z, a–z), digits (0–9), underscore (`_`), or hyphen (`-`).
507
+
- The header value **MUST** be lowercase.
508
+
- The header value **MUST** conform to: `[a-z0-9_-]`.
509
+
- It **MUST** only contain ASCII lowercase letters (a–z), digits (0–9), underscore (`_`), or hyphen (`-`).
510
510
- It **MUST NOT** contain accented/diacritic or non-ASCII characters.
511
511
- The header value **SHOULD** contain human-readable tag for the context.
512
512
- The original requested header value **SHOULD** be propagated to any outgoing requests to retain the context for downstream usage.
513
513
- The header **MUST** be supplied in the response for every request containing the header, and match the original requested value.
514
514
- The header **SHOULD** be supplied in the response for every request in general, if applicable to the API, even if just defaulting to __prod__.
515
515
516
+
```note
517
+
The allowed character set is intentionally conservative and may expand in the future. Implementations should avoid hard-coding assumptions and be prepared for a broader set if the standard is updated.
0 commit comments