# Sending cookies from Weweb -\> Xano **URL:** \ **Category:** Ask us anything\ **Tags:** xano\ **Created:** [February 21, 2024, 10:05pm UTC](https://community.weweb.io/t/sending-cookies-from-weweb-xano/7170 "2024-02-21T22:05:05Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![rossdeacon1](https://avatars.discourse-cdn.com/v4/letter/r/22d042/32.png) [@rossdeacon1](https://community.weweb.io/u/rossdeacon1)\ **Post date:** [February 21, 2024, 10:05pm UTC](https://community.weweb.io/t/sending-cookies-from-weweb-xano/7170/1 "2024-02-21T22:05:05Z")
I am trying to send a cookies from weweb to Xano, but I cannot see them, I have it working using Postman but not weweb. I am using the default CORS for Xano Allow Credentials: True Allow Methods:\* Allow Origins:\* Allow Headers:\* Max Age: 1 hour The cookie I want to send to Xano, is under builder.vunked in dev tools **Cookie information** vunkedCookie=value; Domain=vunked ; Path=/; SameSite=Lax Expires=Thu, 20 Feb 2025 20:34:38 GMT; **Postman** When calling the API through postman i can access the cookies in the header ![Screenshot 2024-02-22 at 10.35.18](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/3/3e97eb3e1be0edcefa9a958ddce6f569b6e61f6d.png) I can use postman to include cookies and view the cookie in xano but cant seem to do from weweb? **Weweb** when weweb calls the API, there are no cookies present **Domains** the xano domain is subdomain xano.vunked weweb domain is subdomain is builder.vunked Can anyone help? ---
**Author:** ![Alexis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/alexis/32/13248_2.png) [@Alexis](https://community.weweb.io/u/Alexis)\ **Post date:** [February 22, 2024, 11:20am UTC](https://community.weweb.io/t/sending-cookies-from-weweb-xano/7170/2 "2024-02-22T11:20:07Z")
> [@rossdeacon1](#): > > Allow Origins:\* I think this line prevent Xano to receive cookies as browser are blocking sending them to server allowing \*, its a security constraint. You have to set a specific allowed domain (our editor and your published app domain) Also you will not be able to send cookies along your xano requests made with our plugin yet. Because it require a hidden feature (toggle send credentials) we disabled because Xano didn’t have a way to configure CORS until recently and so it was not possible anyway (once toggled every request failed because of browser policies, because as I said, to join cookies you need to allow a specific origin and not wildcard) First you can try to set a specific origin and make the request with our REST API plugin, by toggeleing “send credentials” on the rest api action, and see if you receive the cookies. ---
**Author:** ![rossdeacon1](https://avatars.discourse-cdn.com/v4/letter/r/22d042/32.png) [@rossdeacon1](https://community.weweb.io/u/rossdeacon1)\ **Post date:** [February 23, 2024, 6:39pm UTC](https://community.weweb.io/t/sending-cookies-from-weweb-xano/7170/3 "2024-02-23T18:39:26Z")
Hi Alexis, thanks so much. The REST API did the trick for my published app! I can now send cookies to my bank end. It still doesn’t work when trying to hit the API in the builder. I get the following error: stack: "Error: Network Error at e.exports (ttps://editor-cdn.weweb.io/public/js/chunk-vendors.792b3bba.js:1:120680) at \_.onerror (ttps://editor-cdn.weweb.io/public/js/chunk-vendors.792b3bba.js:1:115642) at XMLHttpRequest.sentryWrapped (ttps://browser.sentry-cdn.com/7.45.0/bundle.min.js:2:38971) In Xano CORS management, I have added “https://.weweb.io/” as an origin, not sure if it needs to be something else to get working in the builder? ---
**Author:** ![Alexis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/alexis/32/13248_2.png) [@Alexis](https://community.weweb.io/u/Alexis)\ **Post date:** [February 24, 2024, 10:57am UTC](https://community.weweb.io/t/sending-cookies-from-weweb-xano/7170/4 "2024-02-24T10:57:55Z")
I think it need to be [https://editor.weweb.io](https://editor.weweb.io) 🤔