From 473e578efc7b3ac2369537fa61e959c8affbb926 Mon Sep 17 00:00:00 2001
From: BrennanConroy <brecon@microsoft.com>
Date: Mon, 19 Mar 2018 22:01:28 -0700
Subject: [PATCH] Fix CORS on TS Client (#1652)

---
 client-ts/signalr/src/HttpClient.ts | 1 +
 client-ts/signalr/src/Transports.ts | 2 +-
 samples/SocketsSample/Startup.cs    | 3 ++-
 3 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/client-ts/signalr/src/HttpClient.ts b/client-ts/signalr/src/HttpClient.ts
index 8eb7477b1d..2f8e329834 100644
--- a/client-ts/signalr/src/HttpClient.ts
+++ b/client-ts/signalr/src/HttpClient.ts
@@ -54,6 +54,7 @@ export class DefaultHttpClient extends HttpClient {
             const xhr = new XMLHttpRequest();
 
             xhr.open(request.method, request.url, true);
+            xhr.withCredentials = true;
             xhr.setRequestHeader("X-Requested-With", "XMLHttpRequest");
 
             if (request.headers) {
diff --git a/client-ts/signalr/src/Transports.ts b/client-ts/signalr/src/Transports.ts
index fece7aa26b..480196bc81 100644
--- a/client-ts/signalr/src/Transports.ts
+++ b/client-ts/signalr/src/Transports.ts
@@ -145,7 +145,7 @@ export class ServerSentEventsTransport implements ITransport {
                 url += (url.indexOf("?") < 0 ? "?" : "&") + `access_token=${encodeURIComponent(token)}`;
             }
 
-            const eventSource = new EventSource(url);
+            const eventSource = new EventSource(url, { withCredentials: true });
 
             try {
                 eventSource.onmessage = (e: MessageEvent) => {
diff --git a/samples/SocketsSample/Startup.cs b/samples/SocketsSample/Startup.cs
index 3a59a469be..5573bacb79 100644
--- a/samples/SocketsSample/Startup.cs
+++ b/samples/SocketsSample/Startup.cs
@@ -38,7 +38,8 @@ namespace SocketsSample
                 {
                     p.AllowAnyHeader()
                      .AllowAnyMethod()
-                     .AllowAnyOrigin();
+                     .AllowAnyOrigin()
+                     .AllowCredentials();
                 });
             });