I have two separate services, a React single page application and an express API and I'm trying to communicate from the SPA to the API using the new fetch feature. Since the two services lie on different domains, I'm using a CORS middleware inside of the express application in order to make requests from the SPA to the API. I'm trying to make any fetch requests also include cookies so that way I can verify the cookies in my express application, for example
On the client side:
fetch('http://localhost:8000/hello', {
credentials: 'include',
mode: 'cors'
}).then(/* ... */)
On the server side:
var app = express();
app.use(cors({ credentials: true });
app.use(cookieParser());
app.get('/hello', function (req, res) {
// Try and find the cookies sent with the request
console.log(req.cookies);
res.status(200).json({ message: 'cookies received!' });
});
However, no matter what I try I still cannot access any cookies on the request object even though I can access them through using document.cookies.
An example cookie:
name: token
value: TOKEN_VALUE
domain: localhost
path: /
http: false
secure: false
Does anyone have suggestions on how to approach this? Any help would be greatly appreciated!
credentials: 'include? Also, do you have a JSFiddle or Pnkr?