[whatwg/fetch] same origin requests should allow credentials if credentials mode is sameorigin (#319)

https://fetch.spec.whatwg.org/#concept-http-fetch, when status is `401`,



> If one of the following conditions is true, return response:
>
> - The CORS flag is set.
> - request's credentials mode is not "include".
> - request's window is "no-window". 

However, if the CORS flag is not set, and credentials mode is same-origin, we should be proceeding to the next step.



---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/319