# `AshOnetime.Plug`
[🔗](https://github.com/baselabs/ash_onetime/blob/v1.5.0/lib/ash_onetime/plug.ex#L2)

Copies configured request headers into `conn.private.ash_onetime.untrusted`.

Values remain raw and untrusted. Verification and construction of trusted nonce facts happen
only inside the protected action.

---

*Consult [api-reference.md](api-reference.md) for complete listing*