Cookie auth: credentials:'include' для всех fetch

2026-08-20 21:50:26 +00:00 · 2026-08-20 21:50:26 +00:00 · ae652e37f5
commit ae652e37f5
parent f9d54ae65c
1 changed files with 2 additions and 1 deletions
--- a/public/js/api.js
+++ b/public/js/api.js
@ -63,7 +63,8 @@ async function api(path, opts = {}, _retry = 0) {
  const tid = setTimeout(() => controller.abort(), 15000);
  const t0 = Date.now();
  try {
-    r = await fetch(API_BASE + path, { ...o, signal: controller.signal });
+    // credentials:'include' — браузер шлёт cookies (HttpOnly buhapp_at)
+    r = await fetch(API_BASE + path, { ...o, credentials: 'include', signal: controller.signal });
  } catch (networkErr) {
    clearTimeout(tid);
    const ms = Date.now() - t0;