From d7f78687fe8b6ff19ccfaf2fedfbf0cfc46a9f9d Mon Sep 17 00:00:00 2001 From: Rob Wagner Date: Thu, 27 Jul 2023 23:04:22 -0400 Subject: [PATCH] Update README.md --- README.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 3592a08..ea86725 100644 --- a/README.md +++ b/README.md @@ -58,11 +58,10 @@ for the `HX-Request` header. This will return a `403: Forbidden` response if the header is not present, which is useful if you want to make an entire router, say `/api`, only accessible via htmx requests. -_It should be noted that this is NOT a replacement for authentication. A user -can trivially set the `HX-Request` header themselves. This is merely a -convenience for preventing users from receiving partial responses without full -context. If you need to secure an endpoint, you should be using a proper -authentication system._ +_It should be noted that this is NOT a replacement for an auth guard. A user can +trivially set the `HX-Request` header themselves. This is merely a convenience +for preventing users from receiving partial responses without context. If you +need to secure an endpoint, you should be using a proper auth system._ ## Example: Extractors