Call API Request from Client-side to use cookie for Authorization #828

Activity

1. shrynx commented on Oct 3, 2016

   

   shrynx

   on Oct 3, 2016

   Contributor

   More actions

   Can you explain the issue a bit further, and maybe provide screen shots of failed request. Though my initial guess, connect session uses httpOnly cookie.
   One way would be to disable it.
   eg

   app.use(express.session({
       secret: 'mySecret',
       cookie: { httpOnly: false }
   }));

   But it is advisable to use same-origin ( Only send cookies if the URL is on the same origin as the calling script) or include (Always send cookies, even for cross-origin calls.)
   Please refer these documentations

   • https://developer.mozilla.org/en-US/docs/Web/API/Request/credentials
   • https://developer.mozilla.org/en-US/docs/Web/API/Request/Request
2. shrynx commented on Oct 3, 2016

   

   shrynx

   on Oct 3, 2016

   Contributor

   More actions

   Also i would recommend to use , axios (https://github.com/mzabriskie/axios) , it has inbuilt support for promises, and provides syntactic sugar. with axios you would have to pass something like :

   axios.get('http://my.url', {
       withCredentials: true
   })
   .then( (response) => {
       console.log(response.data)
   })
3. dzuncoi commented on Oct 3, 2016

   

   dzuncoi

   on Oct 3, 2016

   Author

   More actions

   @shrynx Thanks for your quick responses, especially withCredentials: true in the 2nd one, now I use credentials: 'include' in fetch and problem is solved.
   Thanks.

   😄React with 😄2Reacted by shrynx and tarobun
4. dzuncoi

   closed this as completedon Oct 3, 2016
5. lock

   locked and limited conversation to collaborators on Jan 22, 2019