From f7de56a5c9259cbe949bc1a46cc9d28e753aa51d Mon Sep 17 00:00:00 2001
From: j0Shi82 <j0shi.webdev@gmail.com>
Date: Mon, 19 Feb 2024 15:02:25 +0100
Subject: [PATCH 1/3] add basic tests for Set-Cookie http header through fetch
 and xhr

---
 scripts/server.cjs                 | 11 +++++++++
 tests/platform/fetch/fetch.spec.ts |  8 ++++++
 tests/platform/fetch/index.html    | 39 ++++++++++++++++++++++++++++++
 3 files changed, 58 insertions(+)

diff --git a/scripts/server.cjs b/scripts/server.cjs
index e1bc764a..61199651 100644
--- a/scripts/server.cjs
+++ b/scripts/server.cjs
@@ -12,6 +12,17 @@ exports.createServer = function (port, enableAtomics) {
     if (url.pathname === '/') {
       res.writeHead(301, { Location: '/tests/' });
       return res.end();
+    } else if (url.pathname === '/api/cookie') {
+      const name = url.searchParams.get('name');
+      let date = new Date();
+      date.setTime(date.getTime() + 24 * 60 * 60 * 1000); // 24 hours from now
+      let expires = date.toUTCString();
+      res.writeHead(200, {
+        'Set-Cookie': `${name}=1; Path=/; Domain=localhost; expires=${expires}; SameSite=Lax;`,
+        'Access-Control-Allow-Origin': req.headers.origin ? req.headers.origin : '*',
+        'Access-Control-Allow-Credentials': 'true',
+      });
+      return res.end();
     } else if (url.pathname.endsWith('post')) {
       res.writeHead(200);
       let body = '';
diff --git a/tests/platform/fetch/fetch.spec.ts b/tests/platform/fetch/fetch.spec.ts
index df7af159..73068812 100644
--- a/tests/platform/fetch/fetch.spec.ts
+++ b/tests/platform/fetch/fetch.spec.ts
@@ -13,6 +13,10 @@ test('fetch', async ({ page }) => {
   const testFetchJson = page.locator('#testFetchJson');
   await expect(testFetchJson).toHaveText('{"mph":88}');
 
+  await page.waitForSelector('.testFetchCookie');
+  const testFetchCookie = page.locator('#testFetchCookie');
+  await expect(testFetchCookie).toContainText('server-test-fetch=1');
+
   await page.waitForSelector('.testXMLHttpRequest');
   const testXMLHttpRequest = page.locator('#testXMLHttpRequest');
   await expect(testXMLHttpRequest).toHaveText('text');
@@ -22,4 +26,8 @@ test('fetch', async ({ page }) => {
 
   const testXMLHttpRequestCstrNative = page.locator('#testXMLHttpRequestCstrNative');
   await expect(testXMLHttpRequestCstrNative).toHaveText('true');
+
+  await page.waitForSelector('.testXMLHttpRequestCookie');
+  const testXMLHttpRequestCookie = page.locator('#testXMLHttpRequestCookie');
+  await expect(testXMLHttpRequestCookie).toContainText('server-test-xhr=1');
 });
diff --git a/tests/platform/fetch/index.html b/tests/platform/fetch/index.html
index 2f5870bb..d8984cd1 100644
--- a/tests/platform/fetch/index.html
+++ b/tests/platform/fetch/index.html
@@ -91,6 +91,24 @@ <h1>fetch() / XMLHttpRequest</h1>
         </script>
       </li>
 
+      <li>
+        <strong>fetch Set-Cookie</strong>
+        <code>
+          <span id="testFetchCookie"></span>
+        </code>
+        <script type="text/partytown">
+          (async function () {
+            const url = new URL('/api/cookie?name=server-test-fetch', location.origin);
+            const elm = document.getElementById('testFetchCookie');
+            const rsp = await fetch(url, {
+              credentials: 'include',
+            });
+            elm.textContent = document.cookie;
+            elm.className = 'testFetchCookie';
+          })();
+        </script>
+      </li>
+
       <li>
         <strong>XMLHttpRequest</strong>
         <code id="testXMLHttpRequest"></code>
@@ -161,6 +179,27 @@ <h1>fetch() / XMLHttpRequest</h1>
         </script>
       </li>
 
+      <li>
+        <strong>XMLHttpRequest Set-Cookie</strong>
+        <code>
+          <span id="testXMLHttpRequestCookie"></span>
+        </code>
+        <script type="text/partytown">
+          (async function () {
+            const url = new URL('/api/cookie?name=server-test-xhr', location.origin);
+            const elm = document.getElementById('testXMLHttpRequestCookie');
+            const xhr = new XMLHttpRequest();
+            xhr.addEventListener('load', function () {
+              elm.textContent = document.cookie;
+              elm.className = 'testXMLHttpRequestCookie';
+            });
+            xhr.open('GET', url);
+            xhr.withCredentials = true;
+            xhr.send();
+          })();
+        </script>
+      </li>
+
       <script type="text/partytown">
         (function () {
           document.body.classList.add('completed');

From d02c1ab1703ba85c3a2733e8823d3da8f1336ffb Mon Sep 17 00:00:00 2001
From: j0Shi82 <j0shi.webdev@gmail.com>
Date: Mon, 19 Feb 2024 15:07:14 +0100
Subject: [PATCH 2/3] add new option to respect withCredentials for xhr
 requests inside the web worker

---
 src/lib/types.ts                    | 5 +++++
 src/lib/web-worker/worker-window.ts | 6 +++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/lib/types.ts b/src/lib/types.ts
index 3b6b22ed..b9c792c7 100644
--- a/src/lib/types.ts
+++ b/src/lib/types.ts
@@ -448,6 +448,11 @@ export interface PartytownConfig {
   get?: GetHook;
   set?: SetHook;
   apply?: ApplyHook;
+  /**
+   * When set to true, the Partytown Web Worker will respect the `withCredentials` option of XMLHttpRequests.
+   * Default: false
+   */
+  allowXhrCredentials?: boolean;
   /**
    * An absolute path to the root directory which Partytown library files
    * can be found. The library path must start and end with a `/`.
diff --git a/src/lib/web-worker/worker-window.ts b/src/lib/web-worker/worker-window.ts
index 594655b7..025e0085 100644
--- a/src/lib/web-worker/worker-window.ts
+++ b/src/lib/web-worker/worker-window.ts
@@ -587,7 +587,11 @@ export const createWindow = (
               args[1] = resolveUrl(env, args[1], 'xhr');
               (super.open as any)(...args);
             }
-            set withCredentials(_: any) {}
+            set withCredentials(_: boolean) {
+              if (webWorkerCtx.$config$.allowXhrCredentials) {
+                super.withCredentials = _;
+              }
+            }
             toString() {
               return str;
             }

From 23d99f352e4b50a42be4e6a461985c2940364ab1 Mon Sep 17 00:00:00 2001
From: j0Shi82 <j0shi.webdev@gmail.com>
Date: Mon, 19 Feb 2024 17:38:18 +0100
Subject: [PATCH 3/3] prettier

---
 src/lib/sandbox/read-main-platform.ts | 9 ++-------
 src/lib/web-worker/init-web-worker.ts | 5 +----
 src/lib/web-worker/worker-storage.ts  | 2 +-
 3 files changed, 4 insertions(+), 12 deletions(-)

diff --git a/src/lib/sandbox/read-main-platform.ts b/src/lib/sandbox/read-main-platform.ts
index 832a6762..e3ec55e1 100644
--- a/src/lib/sandbox/read-main-platform.ts
+++ b/src/lib/sandbox/read-main-platform.ts
@@ -7,12 +7,7 @@ import {
   serializeConfig,
 } from '../utils';
 import { config, docImpl, libPath, mainWindow } from './main-globals';
-import {
-  InterfaceType,
-  InterfaceInfo,
-  InterfaceMember,
-  InitWebWorkerData,
-} from '../types';
+import { InterfaceType, InterfaceInfo, InterfaceMember, InitWebWorkerData } from '../types';
 
 export const readMainPlatform = () => {
   const elm = docImpl.createElement('i');
@@ -66,7 +61,7 @@ export const readMainPlatform = () => {
     $config$,
     $interfaces$: readImplementations(impls, initialInterfaces),
     $libPath$: new URL(libPath, mainWindow.location as any) + '',
-    $origin$: origin
+    $origin$: origin,
   };
 
   addGlobalConstructorUsingPrototype(
diff --git a/src/lib/web-worker/init-web-worker.ts b/src/lib/web-worker/init-web-worker.ts
index 5d9320bb..4003c789 100644
--- a/src/lib/web-worker/init-web-worker.ts
+++ b/src/lib/web-worker/init-web-worker.ts
@@ -1,7 +1,4 @@
-import {
-  commaSplit,
-  webWorkerCtx,
-} from './worker-constants';
+import { commaSplit, webWorkerCtx } from './worker-constants';
 import type { InitWebWorkerData, PartytownInternalConfig } from '../types';
 
 export const initWebWorker = (initWebWorkerData: InitWebWorkerData) => {
diff --git a/src/lib/web-worker/worker-storage.ts b/src/lib/web-worker/worker-storage.ts
index 67ac082b..37fa9c02 100644
--- a/src/lib/web-worker/worker-storage.ts
+++ b/src/lib/web-worker/worker-storage.ts
@@ -52,7 +52,7 @@ export const addStorageApi = (
 
     get length() {
       if (isSameOrigin) {
-        return getter(win, [storageName, 'length'])
+        return getter(win, [storageName, 'length']);
       } else {
         warnCrossOrigin('length', storageName, env);
       }