CORS

Created: 2022-03-18 10:17

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials

https://stackoverflow.com/questions/24687313/what-exactly-does-the-access-control-allow-credentials-header-do

For CORS to work with credentials, the Access-Control-Allow-Origin has to be set to the Origin header of the incoming request. The wildcard (*) doesn’t work.