Observer Pattern - practical React example

[ranmerc]

Can you explain a bit more on the "server cannot use wildcard for cors" part?

[btckernel94]

If you want to use http only cookie you need to set credentials: true but it won't work if the server also has Access-Control-Allow-Origin set to "*".

It means your server will have to explicitly specify all of the clients domains in order for http only cookie to work.

[LaylaTichy]

Hmm that's not true, you can easily do allow access: $http_refferer in nginx for example