My UI is running on http://myui.app.dev.something.myhost.net and server which sets the cookie is on say other host http://myservice.app.dev.something.myhost.net

So this is an initial GET request and I am expecting the cookie in the response (Set-Cookie) So basically, this is not the request where cookie is sent to the server from clien-side, but instead I am expecting it to read in the response of this GET request.

My question is if withCredentials is needed for this request OR it is needed only for subsequent requests where the cookie retrieved in the initial response and is then actually sent by the client ?

Also is the domain need to be set explicitly in this case on the Cookie?