From 4744de98fb4ab9f7033edb10ed0c36856e4c74f5 Mon Sep 17 00:00:00 2001
From: Richard <richard@db.org>
Date: Mon, 21 Sep 2015 16:59:47 +0200
Subject: [PATCH] Added xhrFields: { withCredentials: true } to ajaxOptions to
 enable browser authentication for cross origin API requests.

---
 Resources/views/layout.html.twig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Resources/views/layout.html.twig b/Resources/views/layout.html.twig
index 5e170a0..3593eac 100644
--- a/Resources/views/layout.html.twig
+++ b/Resources/views/layout.html.twig
@@ -530,6 +530,7 @@
                     var data = content.length ? content : body;
                     var ajaxOptions = {
                         url: (url.indexOf('http')!=0?endpoint:'') + url,
+                        xhrFields: { withCredentials: true },
                         type: method,
                         data: data,
                         headers: headers,