DataDome Akamai Module

2.2.0 (2026-05-04)

• Collect Sec-Fetch-Storage-Access header from requests

2.1.0 (2026-02-03)

• Increase length limit from 128 to 512 characters for DataDome cookie to support upcoming features
• Handle 429 status code (Too Many Requests) responses from Protection API to support upcoming features

2.0.0 (2025-09-25)

Breaking changes

• Remove GraphQL and JS Tag injection features
• Remove responseProvider function
• Restore onClientRequest and onClientResponse functions
• Remove EW_DD_CLIENT_SIDE_KEY, EW_DD_JS_URL and EW_DD_JS_OPTIONS variables

Other changes

• Map enriched headers into user-defined variables through the property manager

1.5.0 (2025-08-21)

• Collect Signature, Signature-Agent, and Signature-Input headers from requests to support HTTP message signatures as defined by RFC 9421

1.4.0 (2025-07-24)

• Add GraphQL support

1.3.0 (2025-06-18)

• Add responseProvider function to inject the JavaScript Tag dynamically in HTML responses
• Add EW_DD_CLIENT_SIDE_KEY required variable to specify the client-side key
• Add EW_DD_JS_URL and EW_DD_JS_OPTIONS optional variables to respectively customize the URL to fetch the JavaScript Tag and define its configuration
• Remove onClientRequest and onClientResponse functions to rely on responseProvider function

1.2.2 (2024-09-10)

• Add information about config and API response in debug header for invalid DataDome responses to simplify module installation and troubleshooting
• Truncate X-Real-IP
• Rename ClientId into ClientID to comply with API contract

1.2.1 (2024-06-12)

• Fix default timeout following documentation

1.2.0 (2023-11-17)

• Collect list of request headers for detection improvement

1.1.0 (2023-08-22)

• Add support of session by header
• Improve edge case error handling

1.0.0 (2023-01-09)

• Initial release