# 'Send credentials' toggle for Xano requests?

**URL:** <https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969>\
**Category:** Ask us anything\
**Created:** [June 6, 2023, 5:36pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969 "2023-06-06T17:36:23Z")\
**Posts on this page:** 6\
**Page:** 2

<div class="post-metadata">

**Author:** ![forgelab](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/forgelab/32/9671_2.png) [@forgelab](https://community.weweb.io/u/forgelab)\
**Post date:** [April 12, 2024, 3:12pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/21 "2024-04-12T15:12:24Z")

</div>

thank you @Alexis i understand and i appreciate your update :). having the toggle at both the collection and request action level is perfect. 👏 can’t wait to implement it.

---

<div class="post-metadata">

**Author:** ![Alexis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/alexis/32/13248_2.png) [@Alexis](https://community.weweb.io/u/Alexis)\
**Post date:** [April 12, 2024, 3:14pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/22 "2024-04-12T15:14:17Z")

</div>

Finally you will have it globally too, its in QA (testing) phase 🙂

---

<div class="post-metadata">

**Author:** ![forgelab](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/forgelab/32/9671_2.png) [@forgelab](https://community.weweb.io/u/forgelab)\
**Post date:** [April 12, 2024, 3:25pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/23 "2024-04-12T15:25:59Z")

</div>

awesome! 👏 👏 @Alexis

---

<div class="post-metadata">

**Author:** ![forgelab](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/forgelab/32/9671_2.png) [@forgelab](https://community.weweb.io/u/forgelab)\
**Post date:** [May 19, 2024, 6:51pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/24 "2024-05-19T18:51:07Z")

</div>

@Alexis i see that the ‘Send credentials’ toggle has been live now, very exciting. I went ahead and implemented CORs settings on Xano + toggled on ‘Send credentials’ within WW.

While my requests are working, I’m not seeing the ‘cookie’ value getting set on Xano request.

For example, when ‘Send credentials’ is enabled on our GraphQL requests, I see two request cookies `csrf_token` and `ory_kratos_session` are being set. When the Xano request is being made, there are no Request cookies being included.

Can you please advise?

![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/f/fa3a81cbc0aa53f24214a6bb511fbc396ed5a99f.png)  
 ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/8/84a9711e5b4ce3a905260ddf79e4057f77f13dc3.png)

---

<div class="post-metadata">

**Author:** ![forgelab](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/forgelab/32/9671_2.png) [@forgelab](https://community.weweb.io/u/forgelab)\
**Post date:** [May 19, 2024, 8:07pm UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/25 "2024-05-19T20:07:11Z")

</div>

@Alexis i might have figured it out… it appears when our original cookie is set, the domain is not explicitly identified in the set\_cookie details. provided we are making requests to the same url (which we are doing), the cookies will be included. however, since we’re now using a different subdomain, it appears we must indicate the domain with returned cookie to ensure it’s included in calls to the different subdomain. we will make this adjustment on our side and revert back with any findings.

---

<div class="post-metadata">

**Author:** ![forgelab](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/forgelab/32/9671_2.png) [@forgelab](https://community.weweb.io/u/forgelab)\
**Post date:** [May 20, 2024, 3:22am UTC](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969/26 "2024-05-20T03:22:03Z")

</div>

@Alexis confirmed all is working as expected now that we’ve updated our session cookie to properly indicate `domain` attribute when it’s first being set. nice job to you and the WW team getting this ‘send credentials’ functionality in place! 👏

[Previous page](https://community.weweb.io/t/send-credentials-toggle-for-xano-requests/2969.md?page=1)