Fix CORS stuff when requesting other origins (ie, the AI servers)

online-go · Oct 24, 2023 · 97154f5 · 97154f5
1 parent 5c0d92d
commit 97154f5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/lib/requests.ts b/src/lib/requests.ts
@@ -123,12 +123,14 @@ function request(method: Method): RequestFunction {
                 }
             }
 
+            const same_origin = url.indexOf("://") < 0 || url.indexOf(window.location.origin) === 0;
+
             fetch(url, {
                 signal,
                 method,
-                credentials: "include",
+                credentials: same_origin ? "include" : undefined,
                 keepalive: true,
-                mode: csrf_safe ? "no-cors" : "cors",
+                mode: same_origin ? (csrf_safe ? "no-cors" : "cors") : undefined,
                 cache: cacheable ? "default" : "no-cache",
                 body: prepared_data as any,
                 headers,