f

src/shared/api/base.ts

@@ -6,6 +6,7 @@ async function request<T>(path: string, options: RequestInit = {}): Promise<T> {
 
   const res = await fetch(`${API_URL}${path}`, {
     ...options,
+    credentials: 'include',
     headers: {
       'Content-Type': 'application/json',
       'X-CSRF-Token': token,

src/shared/api/csrf.ts

@@ -9,7 +9,9 @@ let cachedToken: string | null = null
 
 export async function getCsrfToken(): Promise<string> {
   if (cachedToken) return cachedToken
-  const res = await fetch(`${API_URL}/csrf/token`)
+  const res = await fetch(`${API_URL}/csrf/token`, {
+    credentials: 'include',
+  })
   const data: CsrfResponse = await res.json()
   cachedToken = data.token
   return cachedToken