 header contains the original Biscuit token.</li>
<li><strong>Append Restrictions</strong>: Add a new block to the token, restricting it (e.g., limit to <code>GET /api/resource</code> and expire in 30 minutes).</li>
<li><strong>Generate New Token</strong>: The new attenuated Biscuit token is created.</li>
</ol>
<hr>
<h3 class="anchor anchorWithStickyNavbar_LWe7" id="request-after-attenuation"><strong>Request After Attenuation</strong><a href="#request-after-attenuation" class="hash-link" aria-label="Direct 