Web version 1.15 added options to validate HTTP calls from lenses. Understand schemas, security, error, and data governance in connected AR.
Direct answer
Camera Kit Web 1.15 added validation options for lens HTTP requests according to Remote API specifications. The feature helps prevent local or remote off-contract data from silently entering the experience, but is not a substitute for authentication, authorization, abuse protection, data minimization, and server-side validation.
Contract reduces surprise between lens and service
Types, required fields, and expected responses make changes detectable before incorrect data appears in visual context.
Validation on the client does not protect the backend
Every entry must be checked again on the server. Tokens, scopes, rate limits and authorization remain essential.
Failure needs to preserve the task
When service is unavailable or response doesn't pass schema, show clear state, limited retry, and safe fallback content.
Data appears inside the camera
Personal information, price, stock or location can be captured in screenshot and recording. Minimize fields and avoid secrets in the lens.
Nexus Reading
Version specification and lens together, test backward compatibility, monitor errors by version, and maintain kill switch for remote integrations.
FAQ
Does validation prevent any attacks?
No. It verifies compliance with the contract; Security requires server-side controls, authentication, authorization, and monitoring.
Remote API sends data to the lens?
Yes. The feature allows you to connect local or remote data to the experience, depending on the configured integration.
What to do when the schema changes?
Version the API, preserve compatibility when necessary, and release lenses and backends in a coordinated manner with rollback.
Essential guides to delve deeper into the decision
This editorial analysis was produced by Nexus from the official sources below, consulted on October 16, 2026. The text is original and interprets practical implications for companies.
- Snap for Developers — Camera Kit Changelog: Validation options for Lens HTTP requests against Remote API specifications.
- Snap for Developers — Remote APIs: Official template for connecting remote services to experiences created in Lens Studio.
Date reported by the main source: March 11, 2026; analysis published on October 16, 2026.