Request and Scopes

On this page

Request and Scopes

Request

The Request panel shows the method, URL, status, the server that handled the request (host, address and id), request headers, response headers and params of the current request. Copy it as JSON or as a cURL command. Lens masks header and param values whose key matches redact.keys. The Cookie and Authorization headers are masked by default. At collect.level: "light" request headers are not collected.

The response headers are what your app sent, so you can check security headers and cookies in place. Missing ones are reported as Notes.

The Request panel after a form post

Scopes

The Scopes panel shows scope contents. url and form are on by default. cookie, session, request, application and variables are off. Turn them on under collectors.scopes.

The Scopes panel with a redacted password field

limits.maxDepth (4), limits.maxItems (100) and limits.maxString (2000) cap what Lens sends.

Warning

Scope dumps can hold secrets. Redaction covers keys that contain an entry from redact.keys. Add your own keys before you enable a scope. See Security.