Merge pull request #3663 from AlchemyCMS/backport/8.0-stable/pr-3661

[8.0-stable] Include credentials in update check fetch request

Author: tvdeyen

app/javascript/alchemy_admin/components/update_check.js

@@ -6,7 +6,7 @@ class UpdateCheck extends HTMLElement {
     spinner.spin(this)
 
     try {
-      const response = await fetch(this.url)
+      const response = await fetch(this.url, { credentials: "include" })
       const responseJSON = await response.json()
 
       if (response.ok) {

spec/javascript/alchemy_admin/components/update_check.spec.js

@@ -27,6 +27,20 @@ describe("alchemy-update-check", () => {
     vi.clearAllMocks()
   })
 
+  it("fetches with credentials included", async () => {
+    global.fetch.mockResolvedValueOnce({
+      ok: true,
+      json: () => Promise.resolve({ status: "true" })
+    })
+
+    component = renderComponent("alchemy-update-check", html)
+    await new Promise(process.nextTick)
+
+    expect(global.fetch).toHaveBeenCalledWith("/update_check", {
+      credentials: "include"
+    })
+  })
+
   it("shows update available when response is 'true'", async () => {
     global.fetch.mockResolvedValueOnce({
       ok: true,