Sessions

Bash in a browser: its live screen, a voice call, or the whole of Bash inside your app.

Send Authorization: Bearer vk_test_... on every call. Every route of Sessions.

GET/v1/sessions/{session_id}/frame-policyWhich sites may show a session's page.

The page asks this itself; you never need to.

No key: anyone may call it. On the card: embed. Over HTTP it is made from the contract: fill in each {…} and every value.

Request1 field

Path

session_idstringrequiredThe session's id (ses_...).

Answers 2002 fields

object"frame_policy"Always frame_policy.

frame_ancestorsstring[]The sites that may frame the session's page; empty when it may open only as a page of its own.

HTTP

No sample in your language for this route, so here it is over HTTP.

curl "$VESTRA_BASE_URL/v1/sessions/{session_id}/frame-policy"