Fetch API: Credentials mode default to "same-origin"

A Request object’s credentials mode defaults to “omit” in Chrome right now. A spec change recently changed the default to “same-origin”, thus providing credentials to same-origin requests instead of omitting them.

Demo

Specification

Established standard

Status in Chromium

Blink>Network>FetchAPI


Enabled by default (tracking bug) in:

  • Chrome for desktop release 68
  • Chrome for Android release 68
  • Android WebView release 68

Consensus & Standardization

After a feature ships in Chrome, the values listed here are not guaranteed to be up to date.

Owner

Last updated on 2018-07-31