EN中文
lookup> Access-Control-Allow-Credentials

Access-Control-Allow-Credentials

indicates whether the response to request can be exposed when the omit credentials flag is unset

响应头CORS

Quick facts

NameAccess-Control-Allow-Credentials
Type响应头
SpecificationCORS

Description

indicates whether the response to request can be exposed when the omit credentials flag is unset

Syntax

Access-Control-Allow-Credentials: true

CORS

Frequently asked questions

What does the Access-Control-Allow-Credentials header do?

indicates whether the response to request can be exposed when the omit credentials flag is unset

Is Access-Control-Allow-Credentials a request or response header?

It is classified as a response header and can appear in requests or responses depending on context.

Sources & standards

Updated 2026-08-18