I am having issues in reading cookies sent/set by the server in the response headers (Set-Cookie)
I wanted to understand if the below 2 scenarios constitute a cross-site
UI is running on http://localhost:3000 and server which sets the cookie is on say other local host http://172.10.25.63:8089
UI is running on http://myui.app.dev.something.myhost.net and server which sets the cookie is on say other host http://myservice.app.dev.something.myhost.net
Do the below 2 scenarios have a cross-site request ?
For the purposes of Ajax, those are all cross-origin requests (which needs the useCredentials flag on the client and permission from CORS including a preflight on the server).
For the purposes of Cookies being available on both URLs, for case (1) they are different and for case (2) since they share a common set of domains (app.dev.somethings.myhost.net) they can share cookies if the domain parameter is set correctly in the Set-Cookie response header.