#TIL : Sending Cookie in AJAX CORs request


01 Mar 2018 / by KhanhIceTea

By default, browser will remove the cookie and authorization header from AJAX CORs request. So
before sending out the request, make sure withCredentials must be true.

In this case, CORs response must specify which origin is allowed (mean
no wildcard allowed origin rule).


Sound good ?