DEV Community

一鸟
一鸟

Posted on

make browser keep cross-site cookie

Preconditions:

  1. request with credentials
    • if use fetch, should contain credentials: 'include'
    • if use XMR, should with withCredentials: true
  2. if the request is cross-origin, such as requesting api.xxx.dev from site.xxx.dev, the response header should pass the browser's CORS check.

then, the response header should like this:

set-cookie: Authorization=xxx; Path=/; Domain=.xxx.dev; Max-Age=<time>; Expires=<time stamp>; Secure; HttpOnly; SameSite=None
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

antonionduarte profile image

Automate Your Data Collection with My Newegg & Glovo Scrapers on Apify

António Nunes Duarte -

virajlakshitha profile image

Cloud-Native Observability: Metrics, Logs, and Traces with OpenTelemetry

Viraj Lakshitha Bandara -

chris-dev profile image

Why Does JavaScript Remain the "King" of Web Development After Decades?

Chris Dev -

saidmounaim profile image

MeetRoomly an App to Manage and book meeting rooms with ease using Next.js 15, Prisma, Tailwind CSS, and Clerk

Said MOUNAIM -