From 51534f159cdc2f00c8accd331404454b8de75e7b Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Mon, 4 Dec 2017 15:11:33 -0500
Subject: [PATCH] `AllowCredentials` for CORS policy

---
 src/Api/Startup.cs | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/Api/Startup.cs b/src/Api/Startup.cs
index af474d2060..5a6b15f35e 100644
--- a/src/Api/Startup.cs
+++ b/src/Api/Startup.cs
@@ -125,8 +125,9 @@ namespace Bit.Api
             // Cors
             services.AddCors(config =>
             {
-                config.AddPolicy("All", policy =>
-                    policy.AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin().SetPreflightMaxAge(TimeSpan.FromDays(1)));
+                config.AddPolicy("All", policy => policy
+                    .AllowAnyHeader().AllowAnyMethod().AllowAnyOrigin().AllowCredentials()
+                    .SetPreflightMaxAge(TimeSpan.FromDays(1)));
             });
 
             // MVC