New issue
Advanced search Search tips

Issue 759543 link

Starred by 6 users

Issue metadata

Status: Verified
Closed: May 2018
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug

Sign in to add a comment

Make fetch() use "same-origin" credentials by default

Project Member Reported by, Aug 28 2017

Issue description

See for rationale and proposed Fetch Standard change.

Please try to coordinate changing your implementation with others. It's unlikely to be disruptive, but still seems better if it all happens roughly at the same time.
Labels: -Pri-3 Pri-2
Status: Available (was: Unconfirmed)
Setting to Available, but needs to wait for the decision at the issue on WHATWG.
Labels: -OS-Mac
The conclusion is we'll be following the proposal. I.e. the new default will be the same-origin credentials mode.
Status: Assigned (was: Available)
Reassigning to yhirano@.

Need to check the progress of other browsers before taking the action.

Comment 7 by, Feb 26 2018

> Need to check the progress of other browsers before taking the action.

FWIW, this has not been a priority in firefox so far.  If we had update WPT tests, though, we could probably make the change relatively quickly.  If you have a target release we could try to match.
As mentioned in, I'm happy to work on some WPTs for this as it seems to be a big blocker. Also I know this is assigned to yhirano@, however I'm more than happy to take it if he doesn't have the bandwidth!
Status: Started (was: Assigned)
Project Member

Comment 11 by, Apr 30 2018

The following revision refers to this bug:

commit 5b7b98694d9a5bae9b7efeb0a4a34710c83b098b
Author: Dominic Farolino <>
Date: Mon Apr 30 11:20:36 2018

Set fetch()'s default credentials mode to same-origin

As per, the
fetch() API's default credentials mode should be set to
same-origin in the Request constructor.


Bug:  759543 
Change-Id: Id5cb8c747c41385edcc13775fdd18e1f27e7c3c9
Commit-Queue: Yoav Weiss <>
Reviewed-by: Yoav Weiss <>
Reviewed-by: Bernhard Bauer <>
Cr-Commit-Position: refs/heads/master@{#554720}

Status: Verified (was: Started)

Sign in to add a comment