Fetch API Credentials: How to Control Cookie and Auth Behavior

The Fetch API's credentials option controls whether cookies, HTTP auth, and TLS client certs are sent with requests. It offers three modes: omit (never send), same-origin (default, send only to same origin), and include (send cross-origin with CORS). Developers must choose the right mode for security and functionality.