Why isn't the third server's cookie being passed on an AJAX request to the third server?

Question

User identification

My site example.com
When loading the site, I request a file from authserver.comand at the same time a cookie is set for authserver.com
. After that, I make an AJAX request to authserver.combut this cookie is not transmitted! Why and how to convey it? After all, she's worth it.

Answer 1

Judging by the comments, you have heard about CORS, but you do n’t know how they work . In short: a script taken from a "third site" can (and will) use cookies from a third site. The script taken from example.com will only work with the example.com domain (including its cookies).

Answer 2

Because you can operate cookies within the same domain, this is determined by the browser's security settings.
Bypass: article