Configurable CORS credentials (#456)

* Configurable CORS credentials

* update readme

src/synapse/authProvider.test.ts

@@ -35,6 +35,7 @@ describe("authProvider", () => {
           Accept: "application/json",
           "Content-Type": "application/json",
         }),
+        credentials: "same-origin",
         method: "POST",
       });
       expect(localStorage.getItem("base_url")).toEqual("http://example.com");
@@ -66,6 +67,7 @@ describe("authProvider", () => {
         Accept: "application/json",
         "Content-Type": "application/json",
       }),
+      credentials: "same-origin",
       method: "POST",
     });
     expect(localStorage.getItem("base_url")).toEqual("https://example.com");
@@ -88,6 +90,7 @@ describe("authProvider", () => {
           Authorization: "Bearer foo",
         }),
         method: "POST",
+        credentials: "same-origin",
         user: { authenticated: true, token: "Bearer foo" },
       });
       expect(localStorage.getItem("access_token")).toBeNull();

src/synapse/authProvider.ts

@@ -23,6 +23,7 @@ const authProvider: AuthProvider = {
     console.log("login ");
     let options: Options = {
       method: "POST",
+      credentials: GetConfig().corsCredentials,
       body: JSON.stringify(
         Object.assign(
           {
@@ -151,6 +152,7 @@ const authProvider: AuthProvider = {
 
     const options: Options = {
       method: "POST",
+      credentials: GetConfig().corsCredentials,
       user: {
         authenticated: true,
         token: `Bearer ${access_token}`,

src/synapse/dataProvider.ts

@@ -14,6 +14,7 @@ import {
 } from "react-admin";
 
 import { returnMXID } from "../utils/mxid";
+import { GetConfig } from "../utils/config";
 import { MatrixError, displayError } from "../utils/error";
 
 const CACHED_MANY_REF: Record<string, any> = {};
@@ -22,6 +23,7 @@ const CACHED_MANY_REF: Record<string, any> = {};
 const jsonClient = async (url: string, options: Options = {}) => {
   const token = localStorage.getItem("access_token");
   console.log("httpClient " + url);
+  options.credentials = GetConfig().corsCredentials;
   if (token !== null) {
     options.user = {
       authenticated: true,