@gitdagray Thanks for the tutorial and code. It really helps.

I faced CORS issue if we use "credentials: 'include'" when the server has allow orgin as "*". Since we are using API Tokens, do we need this flag? Can we change it to "credentials: 'omit'" ?
(Since this flag is only need for cookies)

@gitdagray Thanks for the tutorial and code. It really helps.

I'm having a problem and I don't know what's going on, it seems that the header is not being set or sent correctly

`
const baseQuery = fetchBaseQuery({

baseUrl: "http://localhost:7000/api/v1",

credentials: 'included',

prepareHeaders: (headers: any, { getState }: any) => {

    const token = getState().auth.token;

    if(token) {
        headers.set('Authorization', 'Bearer ${token}');
    }

    headers.set("Content-Type", "application/json");
    
    return headers;
}

})
`

The server app is waiting for application/json Content-Type, but the redux toolkit is sendig text/plain;charset=UTF-8

Response Headers

Access-Control-Allow-Origin: http://localhost:3000
Connection: keep-alive
Content-Length: 249
Content-Type: application/json; charset=utf-8
Date: Sun, 12 Feb 2023 09:14:23 GMT
ETag: W/"f9-EV+UiIlBIZrmmi16jOp8t3c7b8I"
Keep-Alive: timeout=5
Vary: Origin
X-Powered-By: Express

Request Headers

accept: /
Accept-Encoding: gzip, deflate, br
Accept-Language: pt-BR,pt;q=0.9,en-US;q=0.8,en;q=0.7,la;q=0.6
Connection: keep-alive
Content-Length: 51
Content-Type: text/plain;charset=UTF-8
Host: localhost:7000
Origin: http://localhost:3000
Referer: http://localhost:3000/
sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36

do I miss something?