feat: ability to enable xhr creds when cross-site

Signed-off-by: Mohamed Nur <[email protected]>

Author: Mohamed Nur

public/static/config.json

@@ -1,5 +1,6 @@
 {
   "API_BASE_URL": "",
+  "API_WITH_CREDENTIALS": false,
   "OIDC_ISSUER": "",
   "OIDC_CLIENT_ID": "",
   "OIDC_SCOPE": "openid email profile",

src/App.vue

@@ -38,6 +38,16 @@
 
       setJwtForAjax(getToken());
 
+      // Enable credentialed cross-site Access-Control requests
+      if (this.$api.WITH_CREDENTIALS){
+        this.axios.interceptors.request.use(
+          function(config) {
+            config.withCredentials = true;
+            return config;
+          }
+        );
+      }
+
       // debug logging of ajax requests/responses
       if (getUrlVar('debug')) {
         $(document).ajaxComplete((event, xhr) => {

src/main.js

@@ -44,6 +44,10 @@ axios.get(contextPath + "/static/config.json").then(response => {
   } else {
     Vue.prototype.$api.BASE_URL = contextPath;
   }
+
+  // XHR cross-site cookie credentials
+  Vue.prototype.$api.WITH_CREDENTIALS = response.data.API_WITH_CREDENTIALS;
+
   // OpenID Connect
   Vue.prototype.$oidc.ISSUER = response.data.OIDC_ISSUER;
   Vue.prototype.$oidc.CLIENT_ID = response.data.OIDC_CLIENT_ID;