Does AEM Adaptive form pass the session request headers

[kolluax]

Hi all,

We are trying to host an adaptive form inside an external Angular SPA. At the SPA level, we do have certain browser session cookies that we need to authenticate downstream. Since i would not be able to add the headers in the submitted form payload, i was hoping to know if AEM by default passes these headers along with the request ?

Thanks,

Abhishek

[Pranay_M · Accepted solution]

Hi @kolluax,

AEM does not automatically “forward” your SPA’s custom headers as part of the Adaptive Form submit payload.

Cookies are handled by the browser, not by AEM: any cookie scoped to the AEM domain/path is automatically sent with the submit request; cookies scoped only to your Angular SPA’s domain are not sent to AEM unless the domains overlap appropriately.

If you need to use SPA session information to authenticate downstream, you’ll need an explicit integration pattern (see options below).

The docs for embedding forms in external pages and submitting to REST endpoints cover how the form is rendered and how submissions are posted, but they don’t mention any AEM “header propagation” mechanism because there is none; AEM simply receives the browser’s HTTP request as-is and then executes the configured submit action

https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/forms/integrate/...

Thanks
Pranay