| 05:16 | <kochi> | smaug____: yeah, it's on my list in THIS quarter :) |
| 05:16 | <nootan> | Do you guys know if browsers send the Basic HTTP Auth header when doing a fetch() request ? |
| 05:16 | <nootan> | XHR seems to do it, fetch does not seem to do it. I just want to know if its possible |
| 06:15 | <MikeSmith> | nootan: not sure what you mean. XHR doesn’t send the Authorization header automatically. It only sends it if your application code adds it |
| 06:16 | <MikeSmith> | though if it’s a cross-origin request, neither fetch nor XHR will send it unless the server responds to the browser CORS preflight OPTIONS request to say it’s OK to send requests that have the Authorization header |
| 07:21 | <nootan> | MikeSmith: Let me rephrase it. I've a nginx server setup with Basic Http Auth (which I believe looks for Authorization: Basic xxx) , I've a site setup on that server. When I perform an XMLHttpRequest to get some data, I get it, no questions asked. When I do a fetch() call and see the Network tab on my browser devtools, the server response is 401 |
| 07:22 | <MikeSmith> | the server response to the OPTIONS request? |
| 07:23 | <nootan> | let me check |
| 07:24 | <nootan> | 401 |
| 07:25 | <nootan> | OPTIONS with Authorization header ==> 405 |
| 07:26 | <annevk> | nootan: pass credentials:"same-origin" as second argument to the fetch() call |
| 07:27 | <annevk> | nootan: I plan on making that the default in https://github.com/whatwg/fetch/pull/585 but it hasn't happened yet much less landed in browsers |
| 07:27 | <nootan> | but that just sends the cookies, right? |
| 07:27 | <annevk> | nootan: nope |
| 07:28 | <annevk> | nootan: if it controlled just cookies I'd have named the argument cookies |
| 07:31 | <nootan> | annevk: from MDN: same-origin: Send cookies if the URL is on the same origin as the calling script. |
| 07:31 | <nootan> | because it didn't work while doing that too. |
| 07:32 | <nootan> | I'll give it another try |
| 07:34 | <annevk> | nootan: well MDN isn't the spec |
| 07:36 | <nootan> | annevk: thanks! It worked. |
| 07:37 | <nootan> | I'm sure i did try that before, I must have been looking at a different server. :/ |
| 08:01 | <annevk> | smaug____: https://github.com/w3c/webcomponents/issues/661 |
| 08:01 | <annevk> | smaug____: hope that helps |
| 08:02 | <smaug____> | thanks |
| 08:08 | <MikeSmith> | nootan: sorry wasn’t paying enough attention when you said it it was the same server |
| 08:08 | <MikeSmith> | anyway, glad annevk was around :) |
| 08:09 | <MikeSmith> | and glad you got it working |
| 08:35 | <kochi> | annevk: thanks for creating a tracker for remaining issue! |
| 08:35 | <kochi> | s/issue/issues/ |
| 08:37 | <kochi> | it seems clicking on the checkbox directly edits the content... (if you have an editor bit, of course) :) |
| 08:37 | <annevk> | yup |
| 09:47 | <nootan> | thanks MikeSmith // annevk |
| 10:25 | <TimothyGu> | annevk: are the w3c-test commands documented anywhere? |
| 10:30 | <annevk> | TimothyGu: https://github.com/w3c/web-platform-tests#publication |
| 10:30 | <annevk> | TimothyGu: I don't think that works for anyone though, probably need to be privileged somehow |
| 10:31 | <TimothyGu> | annevk: I've got commit access to wpt repo if that matters? |
| 10:31 | <annevk> | TimothyGu: kinda sucks how WebKit gets punished a lot for following the spec, though maybe it happens less frequently than I think |
| 10:31 | <annevk> | TimothyGu: then it prolly works |
| 10:32 | <TimothyGu> | annevk: yeah that was meh |
| 12:10 | <tobie> | annevk: yeah :-/ |
| 12:52 | <annevk> | zcorpan: https://github.com/w3c/web-platform-tests/pull/4966#issuecomment-327163613 |
| 12:55 | <zcorpan> | annevk: thanks, replied. |
| 14:00 | <TimothyGu> | Hey all, can I get added to the @whatwg org? I don't necessarily need (or want) commit access to any repos but would be nice to have a badge on my GitHub profile ;) |
| 14:07 | <annevk> | sure thing |
| 14:08 | <TimothyGu> | annevk: thanks! |
| 14:13 | <SimonSapin> | Any idea why http://w3c.github.io/media-source/ has a ™ in the title? |
| 14:16 | <bradleymeck> | anyone know if someone is working on ES Module loader hooks ? |
| 14:17 | <annevk> | bradleymeck: I don't think so |
| 14:18 | <bradleymeck> | is there a place I could start a discussion / start use case requirements? WICG ? |
| 14:18 | <annevk> | bradleymeck: there's https://github.com/whatwg/html/issues/2640 and https://github.com/whatwg/loader |
| 14:19 | <annevk> | bradleymeck: either of those seems better than doing yet another thing |
| 18:56 | <TabAtkins> | foolip: What's the link to your WPT-template gist or whatever? |
| 18:56 | <TabAtkins> | Gonna go build something into Bikeshed with it. |
| 18:59 | <wanderview> | annevk: JakeA: are we sure about giving up on mixed-content in service workers? https://twitter.com/AdamRackis/status/905131845188284417 |
| 19:03 | <TabAtkins> | wanderview: What if it's a malicious jpg that got mitm'd into an ad? |
| 19:03 | <wanderview> | TabAtkins: thats what mixed-content UX is there for? |
| 19:06 | <TabAtkins> | I was mostly being unserious. ^_^ I don't have an opinion on this or any connection to its resolution. |
| 19:07 | <annevk> | wanderview: I'd prefer that, it's rather complicated |