Mobile Apps: Form Credentials Setting

Does this setting have to be turned on for all mobile forms? Or just the login?

What does this “Credentials” setting do anyway? Maybe @Teodor can explain?

As explained the 3.8.2 release notes:

  • New credentials option to allow sending and receiving of cookies from external server connect sites functioning as API sites for mobile apps for example.

The option is needed when posting and requesting data from an other domain (CORS) and you also want to send and retrieve cookies. So when your server action depends on cookies/session then you should turn it on, this is for all pages that use the security provider.

https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials

1 Like