[{"data":1,"prerenderedAt":55},["ShallowReactive",2],{"tool-guide:http-client":3},{"overview":4,"whatIs":5,"useCases":6,"steps":12,"commonMistakes":19,"relatedStandards":25,"example":35,"limitations":39,"faq":42},"HTTP Request Builder sends a bounded browser Fetch request directly to the exact HTTPS destination shown before Send; StackCache does not proxy it.","An HTTP request builder lets you construct and send HTTP requests with full control over the method, URL, headers, body, and credentials mode — all from your browser. This is essential for API development, debugging, and testing. Unlike tools like Postman or Insomnia that run as desktop applications, this tool sends requests directly from the browser using the Fetch API, which means the request is subject to the same CORS, TLS, and security policies as your web application. This is both a limitation and an advantage: you see exactly how the browser will behave when your frontend makes the same request, including CORS preflight handling, cookie attachment, and mixed-content blocking. The request goes directly from your browser to the destination — StackCache does not proxy, relay, log, or cache any request or response data. You can add custom headers (including Authorization), set the request body (JSON, form data, plain text), and inspect the full response including status code, headers, timing, and body.",[7,8,9,10,11],"Testing REST APIs — send GET, POST, PUT, PATCH, and DELETE requests to verify API behavior during development.","Debugging CORS issues — send a request from the browser to see the actual CORS preflight and error behavior your frontend encounters.","Verifying authentication — test that your API correctly accepts or rejects requests with different Authorization headers.","Inspecting response headers — check caching headers (Cache-Control, ETag), security headers (CSP, HSTS), and CORS headers on API responses.","Webhook testing — send POST requests with custom JSON payloads to test webhook endpoints.",[13,14,15,16,17,18],"Choose the HTTP method: GET, POST, PUT, PATCH, DELETE, HEAD, or OPTIONS.","Enter the destination URL (HTTPS required for most cross-origin requests).","Add custom headers and set the credentials mode (omit, same-origin, or include).","For methods with a body (POST, PUT, PATCH), enter the request body and set the Content-Type header.","Review the normalized origin and any sensitive-header warnings, then click Send.","Inspect the response: status code, headers, body, and timing.",[20,21,22,23,24],"CORS blocking the request — the destination server must include Access-Control-Allow-Origin headers. If it does not, the browser blocks the response. This is a server-side configuration issue.","Mixed content — browsers block HTTP requests from HTTPS pages. Ensure the destination URL uses HTTPS.","Missing Content-Type header — when sending JSON, set Content-Type to application\u002Fjson. Without it, the server may misinterpret the body.","Forbidden headers — browsers prevent setting some headers (Host, Origin, Referer, Cookie without credentials mode). This is a browser security policy, not a tool limitation.","Cookie handling — cookies are only sent when credentials mode is set to \"include\" or \"same-origin\" and the server responds with Access-Control-Allow-Credentials: true.",[26,29,32],{"title":27,"url":28},"MDN — Fetch API reference","https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FAPI\u002FFetch_API",{"title":30,"url":31},"MDN — CORS explanation","https:\u002F\u002Fdeveloper.mozilla.org\u002Fen-US\u002Fdocs\u002FWeb\u002FHTTP\u002FCORS",{"title":33,"url":34},"RFC 9110 — HTTP Semantics","https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc9110",{"label":36,"input":37,"output":38},"Build a public health request","GET https:\u002F\u002Fapi.example.test\u002Fhealth","The browser contacts the displayed origin only after Send.",[40,41],"The destination must permit the request under CORS, TLS, mixed-content, cookie, and forbidden-header rules.","The destination receives anything you deliberately send and handles it under its own policy.",[43,46,49,52],{"question":44,"answer":45},"Does this tool proxy my HTTP requests?","No. Requests go directly from your browser to the destination URL. StackCache does not relay, log, or cache any request or response.",{"question":47,"answer":48},"Why do I get a CORS error?","CORS errors occur when the destination server does not include Access-Control-Allow-Origin headers permitting browser requests. This is a server-side restriction, not a StackCache limitation.",{"question":50,"answer":51},"Can I test APIs that require authentication?","Yes. You can add custom headers including Authorization, API keys, and cookies. Credentials are sent directly to the destination and are not stored by StackCache.",{"question":53,"answer":54},"Can I send requests to localhost?","Yes, if your local server is running on HTTPS or the browser allows mixed content. HTTP localhost requests may work in some browsers due to special-case handling.",1788868141438]