skills/angular__angular
1
0
Fork 0
mirror of https://github.com/angular/angular.git synced 2026-09-14 13:54:52 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs: clarify behavior of credentials option during SSR on Node.js

Browse Source
This commit is contained in:
SkyZeroZx
2026-07-22 14:14:49 -05:00
committed by Alex Rickabaugh
parent 3d09713386
commit 90ac011fa9
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
adev/src/content/guide/http/making-requests.md
+2
View File
@@ -531,6 +531,8 @@ Available `credentials` values:
TIP: Use `credentials: 'include'` when you need to send authentication cookies or headers to a different domain that supports CORS. Avoid mixing `credentials` and `withCredentials` options to prevent confusion.
IMPORTANT: During SSR on Node.js, `credentials: 'include'` does not automatically forward cookies from the incoming browser request. The `credentials` option does not remove `Cookie` or `Authorization` headers that you add explicitly. [Undici permits some headers that browsers forbid](https://undici.nodejs.org/#forbidden-and-safelisted-header-names), so only forward credential headers to trusted origins.
#### Referrer
The `referrer` option allows you to control what referrer information is sent with the request. This is important for privacy and security considerations.