This field is optional. It sets whether cookies can be allowed to be sent. True indicates that cookies are included in the request. False, on the contrary, defaults to false. This field has to be set if the project needs a cookie. CORS requests do not send cookies and HTTP authentication information by default, so it also needs to be set at the front end (take Axios for example): axios.defaults.withcredentials = true