Cookie‑Drop Test UI
Content Host (CNAME)
Cookie‑Drop Path
Protected File Path
POST Mode
Simple (text/plain, no preflight)
application/jose (browser will preflight)
Compact JWS (header.payload.signature)
Make sure the JWS
aud
equals the host you call (e.g.,
lass-documentservice-content-dev.pearson.com
).
POST /cookie-drop
GET protected file
Clear log
All requests use
credentials: include