POST
/scout/judge
const url = 'http://localhost:8000/scout/judge';const options = {method: 'POST'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url http://localhost:8000/scout/judgeOpen a judge session: {"code": "..."} in the body (never in a URL or a header, which access logs record).
The body is parsed by hand, so no validation error can echo it. 400 for another shape, 404 when judge access is
off, 429 past 10 attempts per IP per rolling hour, 401 for a wrong code (no cookie); 200 sets a signed HttpOnly,
SameSite=Strict cookie scoped to /scout (Secure in live mode) and writes a judge event without the IP or the code.
Responses
Section titled “Responses”Successful Response
Media typeapplication/json
Example generated
example