Set withCredentials to false for ajax requests.

[Niklas L]

I'm trying using EventStore to set the remote url for fetching events.
But I get this error message.

Access to fetch at 'https://remote-url.com/events' from origin 'https://localhost:8080' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'.

(Note: it works to send request to the remote url with axios or fetch for me otherwise in my Vuejs-application)

But it seems like the request is sent with 'withCredentials' set to true.


I'm using this code below.

...
eventStore: new EventStore({
	headers: {
		'Content-Type': 'application/json',
                'Authorization': `bearer ${this.token}`
	},
	readUrl: 'https://remote-url.com/events',
	autoLoad   : true,
}),
...

I have tried to read the docs and might have missed something, but I have a hard time with this.
Anyone who have experience with this type of setup?

[pmiklashevich]

We'll investigate the issue and get back to you shortly. Stay tuned!

[mats]

We use the Fetch API under the hood and we'll have this fixed for the next release, to give you full control over credentials. Link: https://app.assembla.com/spaces/bryntum ... -a/details#

[mats]

Issue fixed, will show up in the nightly builds shortly (available once you get a license)