Fetch API: Credentials mode default to "same-origin"

Category: Network / Connectivity
Type: New or changed feature
Status: Enabled by default (Chrome 68)
Intent stage: None

Summary

A Request object’s credentials mode defaults to “omit” in Chrome right now. A spec change recently changed the default to “same-origin”, thus providing credentials to same-origin requests instead of omitting them.

Standards & signals

Specification: https://fetch.spec.whatwg.org/
Firefox: Shipped/Shipping
Safari: No signal
Web developers: Positive
Tracking bug: https://bugs.chromium.org/p/chromium/issues/detail?id=759543

Samples: https://fetch-event-echo.glitch.me

View on chromestatus.com