Frontend & browser·The network from the browser
the cookie was not sent with the cross-origin fetch until you passed `credentials: 'include'`.
Credentialed request
Also calledcredentials: include, withCredentials
A cross-origin request that carries cookies, TLS client certificates or authorisation headers, which `fetch` omits by default. It requires the server to name the exact origin — a wildcard is rejected — and to set `Access-Control-Allow-Credentials`. This combination is the most common cause of an API that works when unauthenticated and fails as soon as a session is involved.