Data

Private context keys

A token injected through the data prop and referenced as _authToken in the request headers — and provably absent from the submitted payload.

Loading the builder…

View the spec
{
  "type": "panel",
  "id": "column",
  "name": "Form",
  "configs": {
    "key": "auth"
  },
  "children": [
    {
      "type": "input",
      "dataType": "string",
      "id": "select",
      "name": "Secured options",
      "configs": {
        "key": "secured",
        "label": "Secured select",
        "optionsSource": "remote",
        "optionsUrl": "https://demo.internal/api/options?tenant={_tenant}",
        "optionsHeaders": "Authorization: Bearer {_authToken}\nX-Tenant: {_tenant}"
      }
    },
    {
      "type": "input",
      "dataType": "string",
      "id": "text",
      "name": "Note",
      "configs": {
        "key": "note",
        "label": "Public field"
      }
    }
  ]
}