Free Online Tutorials

How to allow cross-origin ajax request get and set cookie?

Step 1: send header Access-Control-Allow-Credentials: true

Example for PHP:

header ("Access-Control-Allow-Credentials: true");  

Step 2: set header Access-Control-Allow-Origin: http://yourdomain.com

Example for PHP

header ("Access-Control-Allow-Origin: ".$_SERVER['HTTP_ORIGIN']);

Note: you don’t use:

Access-Control-Allow-Origin: *

Step 3: Add the following to your ajax request (apply for jQuery).

xhrFields: { withCredentials:true }

Example:

$.ajax({
    type: 'GET',
    url: 'http://yourdomain.com/ajax.php?action=session',
    headers: {
        'Authorization': 'Bearer ' + BearerToken
    },
    dataType: 'JSON',
    xhrFields: {
       withCredentials: true
    },
    success: function (d) {
                 
    }
});