The credentials read-only property of the Request interface indicates whether the user agent should send or receive cookies from the other domain in the case of cross-origin requests.

A RequestCredentials dictionary value indicating whether the user agent should send or receive cookies from the other domain in the case of cross-origin requests. Possible values are:

omit

Never send or receive cookies.

same-origin

Send user credentials (cookies, basic http auth, etc..) if the URL is on the same origin as the calling script. This is the default value.

include

Always send user credentials (cookies, basic http auth, etc..), even for cross-origin calls.

This is similar to XHR's withCredentials flag, but with three available values instead of two.

In the following snippet, we create a new request using the Request() constructor (for an image file in the same directory as the script), then save the request credentials in a variable:

const myRequest = new Request("flowers.jpg");
const myCred = myRequest.credentials; // returns "same-origin" by default

• ServiceWorker API
• HTTP access control (CORS)
• HTTP