{
  "scope": "native loopback Apache/PHP HTTPS; manually supplied Origin header per browser standard; not an automated browser",
  "variant": "unmodified r4 PHP",
  "referrerPolicy": "no-referrer",
  "correctAccessCodeUsed": true,
  "matchingSessionCookieAndFormToken": true,
  "origin": "null",
  "status": 403,
  "response": {
    "error": "CSRF_REJECTED"
  }
}