浏览器未在某些请求上添加cookie

Question

我们正在另一个应用程序(moodle(中以插件的形式运行应用程序(本地应用程序(。当我们的应用程序尝试访问后端graphql时，它不会添加cookie，但在发送请求之前，cookie在document.cookie上可用。此外，在iFrame中打开应用程序之前，moodle向后端服务器发出的请求很少，浏览器会将cookie添加到这些请求中。

以下是请求标头

1. moodle->后端

Host: graphql.app.home
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: cross-site
Sec-Fetch-Mode: navigate
Sec-Fetch-Dest: iframe
Referer: https://moodle.home:8443/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: cb_ltiid=s%3AF0FJpsc8bVe9ZqyLzgNgK7flKfGf4W7u.2GL43c7XLV11BzHXCS%2B7AvQKBAS9xg%2BNc7gaj264%2Bks

2. 应用程序(来自moodle iFrame(->后端

Host: graphql.app.home
Connection: keep-alive
Content-Length: 118
Pragma: no-cache
Cache-Control: no-cache
accept: */*
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 11_0_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36
content-type: application/json
Origin: https://app.home
Sec-Fetch-Site: same-site
Sec-Fetch-Mode: cors
Sec-Fetch-Dest: empty
Referer: https://app.home/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9

感谢的帮助

Answer 1

由于，fetch未发送标头

fetch不会发送cookie，除非您设置了凭据init选项。(自2017年8月25日起。规范更改了默认凭据策略起源相同。Firefox从61.0b13开始更改。(

解决方案是通过credentials: 'include'获取选项