Re: [whatwg/fetch] SameSite cookies aren't sent on credentialed CORS requests (#769)

One possible workaround is to use two authentication cookies, one regular and one marked as `SameSite`. On most endpoints your authentication code would require both cookies to be present, but for requests to endpoints which expect CORS requests you could only authenticate the user with the regular, non-SameSite cookie.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/769#issuecomment-459385475