Running the clients locally with the server remotely is tricky because of CORS - it mostly works, but the session ID cookie isn't saved
The HTTP fetch() API has an option for {credentials: "include"}, which should allow sending and receiving cookies when talking to remote domains, but it requires the server to confirm "this client domain (eg 'localhost') is allowed to talk to me", and the wildcard for "allow all clients to talk to me" is forbidden...
Running the clients locally with the server remotely is tricky because of CORS - it mostly works, but the session ID cookie isn't saved
The HTTP fetch() API has an option for
{credentials: "include"}
, which should allow sending and receiving cookies when talking to remote domains, but it requires the server to confirm "this client domain (eg 'localhost') is allowed to talk to me", and the wildcard for "allow all clients to talk to me" is forbidden...