Including Browser Credentials in HTTP Requests: Exploring Options and Security Concerns

const patchedClient = HttpClient.make((req, url, signal, fiber) =>
  Effect.gen(function* () {
    const context = yield* FiberRef.get(FiberRef.currentContext);
    context.unsafeMap.set("@effect/platform/FetchHttpClient/FetchOptions", {
      credentials: "include",
    });
    const actualClient = yield* HttpClient.HttpClient;
    const res = yield* actualClient.execute(req);
    yield* FiberRef.set(FiberRef.currentContext, context);
    return res;
  }).pipe(Effect.provide(FetchHttpClient.layer))
);

const patchedClient = HttpClient.make((req, url, signal, fiber) =>
  Effect.gen(function* () {
    const context = yield* FiberRef.get(FiberRef.currentContext);
    context.unsafeMap.set("@effect/platform/FetchHttpClient/FetchOptions", {
      credentials: "include",
    });
    const actualClient = yield* HttpClient.HttpClient;
    const res = yield* actualClient.execute(req);
    yield* FiberRef.set(FiberRef.currentContext, context);
    return res;
  }).pipe(Effect.provide(FetchHttpClient.layer))
);